General
- Target d365948340e20bcef61f747218fa220d48a4c63b9f5eaabb4751d3104815865f
- Size 387KB
- Sample260907-e5alracn4v
- SHA256 d365948340e20bcef61f747218fa220d48a4c63b9f5eaabb4751d3104815865f
- MD5 26e390225f8e7e9cb4c12dc5523f93c4
- SHA1 f3027e0419faf0d4891ba1dbdaec5d21f634181d
- SHA512 87b2b22ea1b7dedc27c1edfda0209a19857309e26100293d0f29a461f2b43de49c40cce2a433be2d91cf864243d23d35b1c485a94ed94635d9e10e25bbbf10e1
- SSDEEP 6144:7VfjmNpNwc33Evv+dfxafGu78vuz3INvBO+XTZTfuL7NdygtMdN4dhHBVO60m:R7+oc3c76uz3sBO+XThuL5dtMdN8Bb0m
- TLSH T16D847D117790DF31E66F05369A6897B45A6F7C209F2487DB23943E2DBE302C1A934B27
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d365948340e20bcef61f747218fa220d48a4c63b9f5eaabb4751d3104815865f.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target d365948340e20bcef61f747218fa220d48a4c63b9f5eaabb4751d3104815865f
- Size 387KB
- SHA256 d365948340e20bcef61f747218fa220d48a4c63b9f5eaabb4751d3104815865f
- MD5 26e390225f8e7e9cb4c12dc5523f93c4
- SHA1 f3027e0419faf0d4891ba1dbdaec5d21f634181d
- SHA512 87b2b22ea1b7dedc27c1edfda0209a19857309e26100293d0f29a461f2b43de49c40cce2a433be2d91cf864243d23d35b1c485a94ed94635d9e10e25bbbf10e1
- SSDEEP 6144:7VfjmNpNwc33Evv+dfxafGu78vuz3INvBO+XTZTfuL7NdygtMdN4dhHBVO60m:R7+oc3c76uz3sBO+XThuL5dtMdN8Bb0m
- TLSH T16D847D117790DF31E66F05369A6897B45A6F7C209F2487DB23943E2DBE302C1A934B27
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.