General
- Target be6d274f0a40a6a3274ad3dd6e20a8eda12e573f3e56f8725f6dd7799a80a80b
- Size 1.3MB
- Sample260907-sh2nlsbr4t
- SHA256 be6d274f0a40a6a3274ad3dd6e20a8eda12e573f3e56f8725f6dd7799a80a80b
- MD5 48a18dccfffb417a6f2b5d61b6e5e0ec
- SHA1 453bc4c2ecc04ab0195bc122977359505225d4a9
- SHA512 8a7b8a1067c7c7c9f03b956f403c030588b251e749b31aba974ea3c40a87c6bef7547ed87468901d08e2d847defb23c55111cf36ec53769128403a0b31719200
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nI:eylFHUv6ReIt0jSrOI
- TLSH T187557E02BA4DC2B1C18C15702D6F73366D349A593B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
be6d274f0a40a6a3274ad3dd6e20a8eda12e573f3e56f8725f6dd7799a80a80b.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target be6d274f0a40a6a3274ad3dd6e20a8eda12e573f3e56f8725f6dd7799a80a80b
- Size 1.3MB
- SHA256 be6d274f0a40a6a3274ad3dd6e20a8eda12e573f3e56f8725f6dd7799a80a80b
- MD5 48a18dccfffb417a6f2b5d61b6e5e0ec
- SHA1 453bc4c2ecc04ab0195bc122977359505225d4a9
- SHA512 8a7b8a1067c7c7c9f03b956f403c030588b251e749b31aba974ea3c40a87c6bef7547ed87468901d08e2d847defb23c55111cf36ec53769128403a0b31719200
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nI:eylFHUv6ReIt0jSrOI
- TLSH T187557E02BA4DC2B1C18C15702D6F73366D349A593B36CEA3B7D3DD689D32B919E27209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE