General
- Target 20f95a80bb973f5cecfd8259669899231d3c66c86c4443b149e70525bb56827c
- Size 625KB
- Sample261017-dfcjda1w2k
- SHA256 20f95a80bb973f5cecfd8259669899231d3c66c86c4443b149e70525bb56827c
- MD5 20bd198e65e605dd683f267de8782e0b
- SHA1 f79b9fc9a73801cd22836d10c583fe13ec68e7c7
- SHA512 b2339fe8574babe4507fa0a3d2051f40d21b725b4fe1c63847d985a512ac5d7a275d4d542509b11ef0bd11e0a4dcc3c23c535911232a8d61c15a30e0b407e3fb
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKa:XLl7k/B2mGbUMoJnAhtKa
- TLSH T16BD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
20f95a80bb973f5cecfd8259669899231d3c66c86c4443b149e70525bb56827c.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 20f95a80bb973f5cecfd8259669899231d3c66c86c4443b149e70525bb56827c
- Size 625KB
- SHA256 20f95a80bb973f5cecfd8259669899231d3c66c86c4443b149e70525bb56827c
- MD5 20bd198e65e605dd683f267de8782e0b
- SHA1 f79b9fc9a73801cd22836d10c583fe13ec68e7c7
- SHA512 b2339fe8574babe4507fa0a3d2051f40d21b725b4fe1c63847d985a512ac5d7a275d4d542509b11ef0bd11e0a4dcc3c23c535911232a8d61c15a30e0b407e3fb
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJKa:XLl7k/B2mGbUMoJnAhtKa
- TLSH T16BD4D02C32AD5261E0EE4178B80EB552E671B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE