General
- Target 28f543f4f643558c80e03f75db1e270fc3ec128c69c7d8dbd53be2505d20ec3e
- Size 580KB
- Sample260916-2wlc8agl81
- SHA256 28f543f4f643558c80e03f75db1e270fc3ec128c69c7d8dbd53be2505d20ec3e
- MD5 f424db2b56321e65e181fe7c1c53f446
- SHA1 277220060439b4a9125238f51670de347402dc37
- SHA512 5e347af199cf8fa2d030b793c9688f4d0171fefeeb55fc84d806bb513ca7cabdd5c41525fc70f66ffae1fe12b26666278d5781d13b6f58535d78ecefa2cf184e
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JQ:QptHFyrsy7t+TSQDsy777vxCRbapnQ
- TLSH T1DDC4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target 28f543f4f643558c80e03f75db1e270fc3ec128c69c7d8dbd53be2505d20ec3e
- Size 580KB
- SHA256 28f543f4f643558c80e03f75db1e270fc3ec128c69c7d8dbd53be2505d20ec3e
- MD5 f424db2b56321e65e181fe7c1c53f446
- SHA1 277220060439b4a9125238f51670de347402dc37
- SHA512 5e347af199cf8fa2d030b793c9688f4d0171fefeeb55fc84d806bb513ca7cabdd5c41525fc70f66ffae1fe12b26666278d5781d13b6f58535d78ecefa2cf184e
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JQ:QptHFyrsy7t+TSQDsy777vxCRbapnQ
- TLSH T1DDC4EF2A3E6D07A5D4CD4474AE0AB7588A206DA13737CEF731A3B168CA36FD43E31650
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE