General
- Target 5ef6d7f3a4afea548dcdf3bcbd05bc3b8539e39561d517036dd676d54c4ccb0e
- Size 706KB
- Sample261002-lsgymathnh
- SHA256 5ef6d7f3a4afea548dcdf3bcbd05bc3b8539e39561d517036dd676d54c4ccb0e
- MD5 6b941232c29412ad6fa4cff74a1785fb
- SHA1 b376aa214b96e4309af2ea7b38704db68cec697d
- SHA512 14a9d02b6ae656dc714c5fc1b43d720ca1e16f53308b58ba33bf57377cf741854a7f1751cde05cf59226ba60fa07bfada5d860a75e4e94d5de35d15d03c8a619
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/7516:QptHFyrsy7t+TSQDsy777vxCRbapnnAs
- TLSH T157F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5ef6d7f3a4afea548dcdf3bcbd05bc3b8539e39561d517036dd676d54c4ccb0e.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5ef6d7f3a4afea548dcdf3bcbd05bc3b8539e39561d517036dd676d54c4ccb0e
- Size 706KB
- SHA256 5ef6d7f3a4afea548dcdf3bcbd05bc3b8539e39561d517036dd676d54c4ccb0e
- MD5 6b941232c29412ad6fa4cff74a1785fb
- SHA1 b376aa214b96e4309af2ea7b38704db68cec697d
- SHA512 14a9d02b6ae656dc714c5fc1b43d720ca1e16f53308b58ba33bf57377cf741854a7f1751cde05cf59226ba60fa07bfada5d860a75e4e94d5de35d15d03c8a619
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/7516:QptHFyrsy7t+TSQDsy777vxCRbapnnAs
- TLSH T157F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE