General
- Target 2e258d2249a6e7fd8479ae8c272a06fe9c8b737e2ae482006458650d6ddce3e8
- Size 1.2MB
- Sample260831-dfwx1stfla
- SHA256 2e258d2249a6e7fd8479ae8c272a06fe9c8b737e2ae482006458650d6ddce3e8
- MD5 ac9fcecf319f5b0daae6c81262fe0c30
- SHA1 5c541976dc846091c88b5ffd0e07a7485b07297a
- SHA512 20175b6a7d791f2658b6c0a25fd187c6d5b72c9204e25e6a637ac07a67a12ffaf837be6b2d1fa351243e53684d9720d08004fe05bff0b880f4a1e095b98f26a5
- SSDEEP 24576:9qylFH50Dv6RwyeQvt6ot0h9HyrOmiruARp:QylFHUv6ReIt0jSrOb
- TLSH T1FB557C02B64DC2B1C28C157136BF77366D349B5A1A35CA93B7E0CD6D2D32761AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2e258d2249a6e7fd8479ae8c272a06fe9c8b737e2ae482006458650d6ddce3e8.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2e258d2249a6e7fd8479ae8c272a06fe9c8b737e2ae482006458650d6ddce3e8
- Size 1.2MB
- SHA256 2e258d2249a6e7fd8479ae8c272a06fe9c8b737e2ae482006458650d6ddce3e8
- MD5 ac9fcecf319f5b0daae6c81262fe0c30
- SHA1 5c541976dc846091c88b5ffd0e07a7485b07297a
- SHA512 20175b6a7d791f2658b6c0a25fd187c6d5b72c9204e25e6a637ac07a67a12ffaf837be6b2d1fa351243e53684d9720d08004fe05bff0b880f4a1e095b98f26a5
- SSDEEP 24576:9qylFH50Dv6RwyeQvt6ot0h9HyrOmiruARp:QylFHUv6ReIt0jSrOb
- TLSH T1FB557C02B64DC2B1C28C157136BF77366D349B5A1A35CA93B7E0CD6D2D32761AE2720E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE