General
- Target 60ebf4c0d1689bd7c3144b16caf548a75a4d073d7c5a957e854acd3a0225ff51
- Size 625KB
- Sample261017-pyxstafa25
- SHA256 60ebf4c0d1689bd7c3144b16caf548a75a4d073d7c5a957e854acd3a0225ff51
- MD5 ef9e30460b22d45d6260c3e9af0c659d
- SHA1 e3b85b6440ee894320115f73edcd299753f86f56
- SHA512 d3d0e539137994ef5ed98f6d76234425789e82d557192221cbe6bb94f571380914f6096a5efaf927e887154ad28b3ab3b6a29407e0b38c393f43201e493505a2
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK4:XLl7k/B2mGbUMoJnAhtK4
- TLSH T155D4D02C32AD5261E0EE4178B80EB551E672B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
60ebf4c0d1689bd7c3144b16caf548a75a4d073d7c5a957e854acd3a0225ff51.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 60ebf4c0d1689bd7c3144b16caf548a75a4d073d7c5a957e854acd3a0225ff51
- Size 625KB
- SHA256 60ebf4c0d1689bd7c3144b16caf548a75a4d073d7c5a957e854acd3a0225ff51
- MD5 ef9e30460b22d45d6260c3e9af0c659d
- SHA1 e3b85b6440ee894320115f73edcd299753f86f56
- SHA512 d3d0e539137994ef5ed98f6d76234425789e82d557192221cbe6bb94f571380914f6096a5efaf927e887154ad28b3ab3b6a29407e0b38c393f43201e493505a2
- SSDEEP 12288:WA6mlfQ2rpk8k1/FomGv68UCYkhzUnJkO01Zj03lQJK4:XLl7k/B2mGbUMoJnAhtK4
- TLSH T155D4D02C32AD5261E0EE4178B80EB551E672B8351731A5EF36E0D53D9B33BE87239E41
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE