General
- Target 52feaf9ae4b853f4fffa6bae6956f9266d8e4d3b992a12c461cd3bb61f337606
- Size 1.9MB
- Sample261002-h5betswaje
- SHA256 52feaf9ae4b853f4fffa6bae6956f9266d8e4d3b992a12c461cd3bb61f337606
- MD5 ac260e597a8bc291c4f13cff23897c1d
- SHA1 7902a57983413c1bc9a45043ef64f0d9cbacf01c
- SHA512 e7b374055be2e33239eac487fa03251fa60d5b9b70f8cd74c51ccedac59e4fdfa5fa7c1cb825fd0a8ebc826568b3bde61182e61a045128a6a6ffc83abf1fd6e6
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQf:eylFHUv6ReIt0jSrOZ88k
- TLSH T146957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
52feaf9ae4b853f4fffa6bae6956f9266d8e4d3b992a12c461cd3bb61f337606.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 52feaf9ae4b853f4fffa6bae6956f9266d8e4d3b992a12c461cd3bb61f337606
- Size 1.9MB
- SHA256 52feaf9ae4b853f4fffa6bae6956f9266d8e4d3b992a12c461cd3bb61f337606
- MD5 ac260e597a8bc291c4f13cff23897c1d
- SHA1 7902a57983413c1bc9a45043ef64f0d9cbacf01c
- SHA512 e7b374055be2e33239eac487fa03251fa60d5b9b70f8cd74c51ccedac59e4fdfa5fa7c1cb825fd0a8ebc826568b3bde61182e61a045128a6a6ffc83abf1fd6e6
- SSDEEP 24576:rqylFH50Dv6RwyeQvt6ot0h9HyrOmiruAm2nnAhUQfnAhUQfnAhUQf:eylFHUv6ReIt0jSrOZ88k
- TLSH T146957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE