General
- Target 5157367a1731f0fda4915c1b4b8ab6a7d4e2dc9e80feb42ca6685d7f8b03c14d
- Size 1.9MB
- Sample261017-pkbness1ht
- SHA256 5157367a1731f0fda4915c1b4b8ab6a7d4e2dc9e80feb42ca6685d7f8b03c14d
- MD5 a9a22064ac3290f8fcef0d926093941b
- SHA1 2bdd79a858823effd02985e54fd121f2bb9145ba
- SHA512 b34678857ec784fca6ae600fa1230f7d3941fc77407746a6d0f725f2776cd2e917c8c95dc07bab062fc2663ea9c38f8d71a5208de14449e4d6e28c6b03336755
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQH:WylFHUv6ReIt0jSrOW88U
- TLSH T109957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
5157367a1731f0fda4915c1b4b8ab6a7d4e2dc9e80feb42ca6685d7f8b03c14d.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 5157367a1731f0fda4915c1b4b8ab6a7d4e2dc9e80feb42ca6685d7f8b03c14d
- Size 1.9MB
- SHA256 5157367a1731f0fda4915c1b4b8ab6a7d4e2dc9e80feb42ca6685d7f8b03c14d
- MD5 a9a22064ac3290f8fcef0d926093941b
- SHA1 2bdd79a858823effd02985e54fd121f2bb9145ba
- SHA512 b34678857ec784fca6ae600fa1230f7d3941fc77407746a6d0f725f2776cd2e917c8c95dc07bab062fc2663ea9c38f8d71a5208de14449e4d6e28c6b03336755
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhUQfnAhUQfnAhUQH:WylFHUv6ReIt0jSrOW88U
- TLSH T109957C16769D81E1D06A1030696B7336E931B9253722CAEB73E1CC7C9E33BD1AE36705
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE