General
- Target 2af8fdf85caf774522c4eea29b8fc79e19536e99a2eb3d9497c6f90c40f65d33
- Size 1.4MB
- Sample260903-nb5pgafr5v
- SHA256 2af8fdf85caf774522c4eea29b8fc79e19536e99a2eb3d9497c6f90c40f65d33
- MD5 9f54bb9f28953ad4a2f7294bba278505
- SHA1 3377dedb3e6600f31cc6281d9e38cf881fe6ce79
- SHA512 7dbe84b7c7c696654ef7365b70afe8461a0f7cef35e942514c84220ed5cc85d823a0fcd5fd97a06beabb2bf5e8894606847e3944fb3d0f4f3c08918318ae1a82
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHe:MLl7k/B2mGbUMoL3
- TLSH T1F765E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D27D9B33BD83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2af8fdf85caf774522c4eea29b8fc79e19536e99a2eb3d9497c6f90c40f65d33.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2af8fdf85caf774522c4eea29b8fc79e19536e99a2eb3d9497c6f90c40f65d33
- Size 1.4MB
- SHA256 2af8fdf85caf774522c4eea29b8fc79e19536e99a2eb3d9497c6f90c40f65d33
- MD5 9f54bb9f28953ad4a2f7294bba278505
- SHA1 3377dedb3e6600f31cc6281d9e38cf881fe6ce79
- SHA512 7dbe84b7c7c696654ef7365b70afe8461a0f7cef35e942514c84220ed5cc85d823a0fcd5fd97a06beabb2bf5e8894606847e3944fb3d0f4f3c08918318ae1a82
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkHe:MLl7k/B2mGbUMoL3
- TLSH T1F765E01D325E4361E4EE8038BC0EB690D676BC751B7196DB3AA0D27D9B33BD83635A01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE