General
- Target dbdea7b19fe68e565d838b2bcc9932964daa1beb192ec66bc90d58b9114575b9
- Size 1.2MB
- Sample261017-persfsft3z
- SHA256 dbdea7b19fe68e565d838b2bcc9932964daa1beb192ec66bc90d58b9114575b9
- MD5 9964d052f6f4128a0416a6179eb757d4
- SHA1 3ca1ff52e088cbb6bbfb34edd54aebaceaa1d11d
- SHA512 25e2c0d72fe2c8e8eb0612f2dc248aba2a08d8dbe405bb911bd8dc79bfde323d39ffc393c5ba883b8e37827842ac29da839b8b7c1fab2aa04ac1684694a5f2e6
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHy:VptHFyrsy7t+TSQDsy777vxCRbay
- TLSH T19155122A776CCB26C0CD1D32B51EFEF86A2C8D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
dbdea7b19fe68e565d838b2bcc9932964daa1beb192ec66bc90d58b9114575b9.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target dbdea7b19fe68e565d838b2bcc9932964daa1beb192ec66bc90d58b9114575b9
- Size 1.2MB
- SHA256 dbdea7b19fe68e565d838b2bcc9932964daa1beb192ec66bc90d58b9114575b9
- MD5 9964d052f6f4128a0416a6179eb757d4
- SHA1 3ca1ff52e088cbb6bbfb34edd54aebaceaa1d11d
- SHA512 25e2c0d72fe2c8e8eb0612f2dc248aba2a08d8dbe405bb911bd8dc79bfde323d39ffc393c5ba883b8e37827842ac29da839b8b7c1fab2aa04ac1684694a5f2e6
- SSDEEP 12288:LxpFjHFyrsy7eq+TsRQDO/y7ooJ7vDnRthuhRQGsHy:VptHFyrsy7t+TSQDsy777vxCRbay
- TLSH T19155122A776CCB26C0CD1D32B51EFEF86A2C8D558B79C5673AB47B4E183A7107E06025
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE