General
- Target wow.exe
- Size 8KB
- Sample260928-p7wbcawsbw
- SHA256 2cd0c64e1eb74313c6a9b020e171da7761206e5a71b2b824f10e96ec64ebac46
- MD5 15018e0bac3b066d9c0e15cfd2f05f06
- SHA1 8da55a73f9b45327c1146512941b2af7ccf72ce6
- SHA512 a75e20b408bf8e2ad3fe4edf945ddf248e60c95d9a1e61fc05d54389d470a9789ea04ab070605e645597e710adcfd4d06a6e72740e1cae37ff1cada3ee912f8c
- SSDEEP 192:8BVjzv4ebxE8Hei08pDMbFUEBGFaNJhLkwcud2DH9VwGfctlnO:8BVf4ebxrc8ASEAaNJawcudoD7Ui
- TLSH T175F16D5696590F8CC09E127B1AAF794F0524D11EDDC9C6ABEFE8303BAC83F941D28365
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
wow.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target wow.exe
- Size 8KB
- SHA256 2cd0c64e1eb74313c6a9b020e171da7761206e5a71b2b824f10e96ec64ebac46
- MD5 15018e0bac3b066d9c0e15cfd2f05f06
- SHA1 8da55a73f9b45327c1146512941b2af7ccf72ce6
- SHA512 a75e20b408bf8e2ad3fe4edf945ddf248e60c95d9a1e61fc05d54389d470a9789ea04ab070605e645597e710adcfd4d06a6e72740e1cae37ff1cada3ee912f8c
- SSDEEP 192:8BVjzv4ebxE8Hei08pDMbFUEBGFaNJhLkwcud2DH9VwGfctlnO:8BVf4ebxrc8ASEAaNJawcudoD7Ui
- TLSH T175F16D5696590F8CC09E127B1AAF794F0524D11EDDC9C6ABEFE8303BAC83F941D28365
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE