General
- Target 4c3df7dbd1e99f874d5c043046e2b7ed37e70dc185dcd892740395701f185368
- Size 625KB
- Sample260907-vpnfnsdk8y
- SHA256 4c3df7dbd1e99f874d5c043046e2b7ed37e70dc185dcd892740395701f185368
- MD5 a678ef037ba923d9728616030c61937f
- SHA1 964af1c352aae675af817569bff07b04f9da3df7
- SHA512 a2ec6ae04faebe333ceca241d3c15c8155204498887135168b481f75240880cafc9bfd292c606ee4b5495661700c5bd3103f518d0a94082209882b63f6dac978
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKm:XLl7k/B2mGbUMoJnAhtKm
- TLSH T1C8D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4c3df7dbd1e99f874d5c043046e2b7ed37e70dc185dcd892740395701f185368.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4c3df7dbd1e99f874d5c043046e2b7ed37e70dc185dcd892740395701f185368
- Size 625KB
- SHA256 4c3df7dbd1e99f874d5c043046e2b7ed37e70dc185dcd892740395701f185368
- MD5 a678ef037ba923d9728616030c61937f
- SHA1 964af1c352aae675af817569bff07b04f9da3df7
- SHA512 a2ec6ae04faebe333ceca241d3c15c8155204498887135168b481f75240880cafc9bfd292c606ee4b5495661700c5bd3103f518d0a94082209882b63f6dac978
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKm:XLl7k/B2mGbUMoJnAhtKm
- TLSH T1C8D4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE