General
- Target bf63729ee88afe0eedb1af63931644576ba799c2ef3f05a7d62ecc1caaa7a4d8
- Size 842KB
- Sample261017-hhgnbsvs4n
- SHA256 bf63729ee88afe0eedb1af63931644576ba799c2ef3f05a7d62ecc1caaa7a4d8
- MD5 21ed77dfd9ad2529c16d76246ce3c384
- SHA1 47e9dc57835cb61631be0cc57bf51e1f4e75e0c9
- SHA512 a36c11086db82184faf679d74848856e3c17856b3c5a80468f5832752ce401bc735a0f1f84341353b395ee0e61be4276d4b5f56dfc6d717e6ff0dfe823639085
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iov:XLl7k/B2mGbUMoJnAhLrnAhUQQs
- TLSH T10F05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
bf63729ee88afe0eedb1af63931644576ba799c2ef3f05a7d62ecc1caaa7a4d8.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bf63729ee88afe0eedb1af63931644576ba799c2ef3f05a7d62ecc1caaa7a4d8
- Size 842KB
- SHA256 bf63729ee88afe0eedb1af63931644576ba799c2ef3f05a7d62ecc1caaa7a4d8
- MD5 21ed77dfd9ad2529c16d76246ce3c384
- SHA1 47e9dc57835cb61631be0cc57bf51e1f4e75e0c9
- SHA512 a36c11086db82184faf679d74848856e3c17856b3c5a80468f5832752ce401bc735a0f1f84341353b395ee0e61be4276d4b5f56dfc6d717e6ff0dfe823639085
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03k/75RaRQJkO01Zj03k/751Iov:XLl7k/B2mGbUMoJnAhLrnAhUQQs
- TLSH T10F05C01D32AE1194E4BF907CE84A6252E67274351732A1EF26E0C53D9F23BE87639F41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE