General
- Target 9af0cf303695c29ec829c5684eb3a9ae1bf52397280677fde1e39a278558b34b
- Size 1.4MB
- Sample260903-vnhtsssaqb
- SHA256 9af0cf303695c29ec829c5684eb3a9ae1bf52397280677fde1e39a278558b34b
- MD5 8c794dd4250c74be2db07da5a6c1e9ab
- SHA1 f539012727655bff92152e7b81b9d8ab0ea16ee2
- SHA512 dadb5ec6d8b8b40a2435cded42bf51e60f9e3cca6ae0cb41a448def44ad26e26e0090b6f6a7a19a7bf39fdd3049598cfaab7f7a049b8b6df6792a5e6dd29e45a
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75d:MLl7k/B2mGbUMoLnAhj
- TLSH T1F365D02D32AD5260E4EE5078B80E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9af0cf303695c29ec829c5684eb3a9ae1bf52397280677fde1e39a278558b34b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 9af0cf303695c29ec829c5684eb3a9ae1bf52397280677fde1e39a278558b34b
- Size 1.4MB
- SHA256 9af0cf303695c29ec829c5684eb3a9ae1bf52397280677fde1e39a278558b34b
- MD5 8c794dd4250c74be2db07da5a6c1e9ab
- SHA1 f539012727655bff92152e7b81b9d8ab0ea16ee2
- SHA512 dadb5ec6d8b8b40a2435cded42bf51e60f9e3cca6ae0cb41a448def44ad26e26e0090b6f6a7a19a7bf39fdd3049598cfaab7f7a049b8b6df6792a5e6dd29e45a
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75d:MLl7k/B2mGbUMoLnAhj
- TLSH T1F365D02D32AD5260E4EE5078B80E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE