General
- Target 3560e3437bdedd21ac2faf0fd4c639c2d7296da9b7ab1ab31b064f1dc7f4974e
- Size 1.9MB
- Sample260831-dreswatgjb
- SHA256 3560e3437bdedd21ac2faf0fd4c639c2d7296da9b7ab1ab31b064f1dc7f4974e
- MD5 5f308d6e78ca8fdbe4ec669841da68a3
- SHA1 f3bb10aa4e7430d8fb309ce69b28636338efd2fe
- SHA512 69a7b4edfee722d73cfbeee58310a1b74802b694e88b3c8733a2e92357a9e724c144cbcdca7aa7a3cf2f86e27fa85a6e20deadde114c6e03c42efd01fe392368
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQk:eylFHUv6ReIt0jSrOZ88j
- TLSH T16C957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
3560e3437bdedd21ac2faf0fd4c639c2d7296da9b7ab1ab31b064f1dc7f4974e.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 3560e3437bdedd21ac2faf0fd4c639c2d7296da9b7ab1ab31b064f1dc7f4974e
- Size 1.9MB
- SHA256 3560e3437bdedd21ac2faf0fd4c639c2d7296da9b7ab1ab31b064f1dc7f4974e
- MD5 5f308d6e78ca8fdbe4ec669841da68a3
- SHA1 f3bb10aa4e7430d8fb309ce69b28636338efd2fe
- SHA512 69a7b4edfee722d73cfbeee58310a1b74802b694e88b3c8733a2e92357a9e724c144cbcdca7aa7a3cf2f86e27fa85a6e20deadde114c6e03c42efd01fe392368
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQk:eylFHUv6ReIt0jSrOZ88j
- TLSH T16C957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE