General
- Target 948263278221d7dfa4b1a319b0228f2b163eac3048e20e1ce2444f1cfcd199ab
- Size 1.6MB
- Sample261027-e6d1ka1wbz
- SHA256 948263278221d7dfa4b1a319b0228f2b163eac3048e20e1ce2444f1cfcd199ab
- MD5 66e72841ab43a6d9053504892e81a9e9
- SHA1 5678ecfd0f25600c8fe8cf9a1d184bd62a471bf8
- SHA512 a1687c180c3640929480b341e4ebb6ca2e563ef84f1de68a88bf7592bf047b57c7b0c4537bc792ce6f7c8b047c71d25f1ad05bb2a0eddf622321343aa1c745e0
- SSDEEP 49152:+ZPchFV4RZyRcQxdhHpJar63hgLP13PYK/daSj+mnqg21T:+Z0hkDyRcQxPHm6Ro1gK/daSKx35
- TLSH T10E7523F844787AE3E5560A34E23B7CE61A0C28652DB4B0F52F0AC8CF467F6C4975255A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
948263278221d7dfa4b1a319b0228f2b163eac3048e20e1ce2444f1cfcd199ab.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 948263278221d7dfa4b1a319b0228f2b163eac3048e20e1ce2444f1cfcd199ab
- Size 1.6MB
- SHA256 948263278221d7dfa4b1a319b0228f2b163eac3048e20e1ce2444f1cfcd199ab
- MD5 66e72841ab43a6d9053504892e81a9e9
- SHA1 5678ecfd0f25600c8fe8cf9a1d184bd62a471bf8
- SHA512 a1687c180c3640929480b341e4ebb6ca2e563ef84f1de68a88bf7592bf047b57c7b0c4537bc792ce6f7c8b047c71d25f1ad05bb2a0eddf622321343aa1c745e0
- SSDEEP 49152:+ZPchFV4RZyRcQxdhHpJar63hgLP13PYK/daSj+mnqg21T:+Z0hkDyRcQxPHm6Ro1gK/daSKx35
- TLSH T10E7523F844787AE3E5560A34E23B7CE61A0C28652DB4B0F52F0AC8CF467F6C4975255A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.