General
- Target 70422c60392125c3cb2bf63bae8e9b0e9fd9bc155e7261f85a1a1a56bd21d8f7
- Size 208KB
- Sample260908-mc4ywsxglf
- SHA256 70422c60392125c3cb2bf63bae8e9b0e9fd9bc155e7261f85a1a1a56bd21d8f7
- MD5 b661b6de25959a9a6b1107f0ab5d320c
- SHA1 c76e9ecf7b9638da8f9b5e9c04ae2c3e0e26c8c8
- SHA512 47d63009fc4a6f251033897edf3ddd6f67d5df8595c1e01fff857ee03a4f262ea704063cc34dc553b30a17f29a112d9e5310325e35f5f66f0aefa2b522f923d3
- SSDEEP 3072:XGmjbFp71g5MMLuhOTuSoxMs3WyEwqq4r4pLthEjQT6j:XGabFh1g5MGuhYjsmWkkEj1
- TLSH T1C2249E4AB945C641C23B19F80CE0C6D40FBAFDDE8B2856E33D587BAE653272445763E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
70422c60392125c3cb2bf63bae8e9b0e9fd9bc155e7261f85a1a1a56bd21d8f7.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 70422c60392125c3cb2bf63bae8e9b0e9fd9bc155e7261f85a1a1a56bd21d8f7
- Size 208KB
- SHA256 70422c60392125c3cb2bf63bae8e9b0e9fd9bc155e7261f85a1a1a56bd21d8f7
- MD5 b661b6de25959a9a6b1107f0ab5d320c
- SHA1 c76e9ecf7b9638da8f9b5e9c04ae2c3e0e26c8c8
- SHA512 47d63009fc4a6f251033897edf3ddd6f67d5df8595c1e01fff857ee03a4f262ea704063cc34dc553b30a17f29a112d9e5310325e35f5f66f0aefa2b522f923d3
- SSDEEP 3072:XGmjbFp71g5MMLuhOTuSoxMs3WyEwqq4r4pLthEjQT6j:XGabFh1g5MGuhYjsmWkkEj1
- TLSH T1C2249E4AB945C641C23B19F80CE0C6D40FBAFDDE8B2856E33D587BAE653272445763E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory