General
- Target ed800877ed2cfdcd6c39b1bc6dac4be03ee75f47ddb375622f8f62d6d7b8429e
- Size 706KB
- Sample261003-kwg75avdkd
- SHA256 ed800877ed2cfdcd6c39b1bc6dac4be03ee75f47ddb375622f8f62d6d7b8429e
- MD5 24d87b4758e18a1212ec8e755b76b140
- SHA1 fc9d3379fc1c2f68762352ea147225cd694796e4
- SHA512 a60edf2faa380f1ef26dc62483adfa81c4d543782a6d0490539e81a598cb0590be1d4241dfd9c8459868e9c2e3a0ae88da76376973d4c71dd2d98d4ff3215c25
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751O:QptHFyrsy7t+TSQDsy777vxCRbapnnAU
- TLSH T108F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ed800877ed2cfdcd6c39b1bc6dac4be03ee75f47ddb375622f8f62d6d7b8429e.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target ed800877ed2cfdcd6c39b1bc6dac4be03ee75f47ddb375622f8f62d6d7b8429e
- Size 706KB
- SHA256 ed800877ed2cfdcd6c39b1bc6dac4be03ee75f47ddb375622f8f62d6d7b8429e
- MD5 24d87b4758e18a1212ec8e755b76b140
- SHA1 fc9d3379fc1c2f68762352ea147225cd694796e4
- SHA512 a60edf2faa380f1ef26dc62483adfa81c4d543782a6d0490539e81a598cb0590be1d4241dfd9c8459868e9c2e3a0ae88da76376973d4c71dd2d98d4ff3215c25
- SSDEEP 12288:6xpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHpad4JkO01Zj03k/751O:QptHFyrsy7t+TSQDsy777vxCRbapnnAU
- TLSH T108F4CE193EAE1294D4AE5078AD0A7355D6717C6137238EFF21A3B178CA32FD87D38A50
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE