General
- Target 5b1b80f18eba0f37e08dcf68eaed86904236b1a726c1324e5f0a43b4a96e2304
- Size 1.2MB
- Sample260907-nqdvastvbw
- SHA256 5b1b80f18eba0f37e08dcf68eaed86904236b1a726c1324e5f0a43b4a96e2304
- MD5 02c571027cc83705b0f3b08331f8c6fe
- SHA1 515938e5c29f3ace63f94cc9e189973ea9419762
- SHA512 504c04ade275502a5aa8408fbfb755ba4db56eff9a791a60a1232cd22c30d55f5a2e8795340181b6487fc742a048863321877eceabe6759033602f398b3d71e8
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHEB:VptHFyrsy7t+TSQDsy777vxCRba0
- TLSH T11755122A776CCB26C0CD1D32B51EFEF86A288C558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5b1b80f18eba0f37e08dcf68eaed86904236b1a726c1324e5f0a43b4a96e2304.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5b1b80f18eba0f37e08dcf68eaed86904236b1a726c1324e5f0a43b4a96e2304
- Size 1.2MB
- SHA256 5b1b80f18eba0f37e08dcf68eaed86904236b1a726c1324e5f0a43b4a96e2304
- MD5 02c571027cc83705b0f3b08331f8c6fe
- SHA1 515938e5c29f3ace63f94cc9e189973ea9419762
- SHA512 504c04ade275502a5aa8408fbfb755ba4db56eff9a791a60a1232cd22c30d55f5a2e8795340181b6487fc742a048863321877eceabe6759033602f398b3d71e8
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHEB:VptHFyrsy7t+TSQDsy777vxCRba0
- TLSH T11755122A776CCB26C0CD1D32B51EFEF86A288C558B79C5773AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE