General
- Target c21c2f3e5cbaa1e836264d79866984efdcdac76ea1638e7a80a49157ef6ddb3d
- Size 3.5MB
- Sample260922-kab4zssamd
- SHA256 c21c2f3e5cbaa1e836264d79866984efdcdac76ea1638e7a80a49157ef6ddb3d
- MD5 d5c6540a20d7c0ccc6fd4d1759c9a2a9
- SHA1 29db6f3fe6c47dc0a407a24dd38fbefcd34b716d
- SHA512 91f66a6efa6b606c5adaab7ff7da076853b52951ce9a9556ee7946cf689e12d6675bc4f1b77e90bc16ba91f957fbb231971ccb5d4edb3e13ccf09ace9af39834
- SSDEEP 98304:iLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLd:6
- TLSH T1FBF5E18193D9A879E5C3163451738FCBE76964A1F6118B0F90A402FDEDC02E5AF1AFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c21c2f3e5cbaa1e836264d79866984efdcdac76ea1638e7a80a49157ef6ddb3d.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target c21c2f3e5cbaa1e836264d79866984efdcdac76ea1638e7a80a49157ef6ddb3d
- Size 3.5MB
- SHA256 c21c2f3e5cbaa1e836264d79866984efdcdac76ea1638e7a80a49157ef6ddb3d
- MD5 d5c6540a20d7c0ccc6fd4d1759c9a2a9
- SHA1 29db6f3fe6c47dc0a407a24dd38fbefcd34b716d
- SHA512 91f66a6efa6b606c5adaab7ff7da076853b52951ce9a9556ee7946cf689e12d6675bc4f1b77e90bc16ba91f957fbb231971ccb5d4edb3e13ccf09ace9af39834
- SSDEEP 98304:iLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLd:6
- TLSH T1FBF5E18193D9A879E5C3163451738FCBE76964A1F6118B0F90A402FDEDC02E5AF1AFB4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.