General
- Target 4a0c9291a7d201734a841bbed456400d36ebc84a8afb0e8e23a0f58eb94943d6
- Size 1.4MB
- Sample261014-phgfwsvva1
- SHA256 4a0c9291a7d201734a841bbed456400d36ebc84a8afb0e8e23a0f58eb94943d6
- MD5 15c27327e70a242ddbb50b2df62e5ca8
- SHA1 b7c79eadcf7a16ddb6a0a5842d8a1d568d6e465e
- SHA512 8a9fd3b9463601dd387261a396bb4f33fdb8215db7af2d33dee09833ac8f18840d60e84c966cb8bb8a10d3b75e7844114b3f2b805a7ca4a2b61cbe14e9f371dd
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75R:MLl7k/B2mGbUMoLnAhz
- TLSH T16E65D02D32AD5260E4EE5078B84E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
4a0c9291a7d201734a841bbed456400d36ebc84a8afb0e8e23a0f58eb94943d6.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 4a0c9291a7d201734a841bbed456400d36ebc84a8afb0e8e23a0f58eb94943d6
- Size 1.4MB
- SHA256 4a0c9291a7d201734a841bbed456400d36ebc84a8afb0e8e23a0f58eb94943d6
- MD5 15c27327e70a242ddbb50b2df62e5ca8
- SHA1 b7c79eadcf7a16ddb6a0a5842d8a1d568d6e465e
- SHA512 8a9fd3b9463601dd387261a396bb4f33fdb8215db7af2d33dee09833ac8f18840d60e84c966cb8bb8a10d3b75e7844114b3f2b805a7ca4a2b61cbe14e9f371dd
- SSDEEP 12288:TA6mlfQ2rpk8k1/FomGv68UCYkhzUtJkO01Zj03k/75R:MLl7k/B2mGbUMoLnAhz
- TLSH T16E65D02D32AD5260E4EE5078B84E7691E6717835173295EF36E0C63D9B33BE87239E40
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE