General
- Target 1e6a984c316b23d2de811f699200400ad0508381aa8e0a10d6a92623f467b979
- Size 1.6MB
- Sample261102-jtztqaee52
- SHA256 1e6a984c316b23d2de811f699200400ad0508381aa8e0a10d6a92623f467b979
- MD5 73f51c48a57ae92e3fdea6c7c74d1b3f
- SHA1 7d0083537e6b006b2451673ba71dbef056d6c33c
- SHA512 26d1aa9e1a26f4c8dac4ff5f8e4c0a76c0e55eaffeeecc5bc0275dc82063b0364511582ec25d2c2a47ec72247db7d695f6fefd6f4b391664aaa5724516eef1a3
- SSDEEP 49152:cPnNmjxVFmXFbHi3QVOzv/Oa/P1w3vXb:cPNCxGxim41w3vr
- TLSH T1D07533CBB00214E5F5445C702A7E2DB97E2D7E1328AA1826FEC4F5D5AABEDF18381117
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1e6a984c316b23d2de811f699200400ad0508381aa8e0a10d6a92623f467b979.exe
Resource
win10v2004-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 1e6a984c316b23d2de811f699200400ad0508381aa8e0a10d6a92623f467b979
- Size 1.6MB
- SHA256 1e6a984c316b23d2de811f699200400ad0508381aa8e0a10d6a92623f467b979
- MD5 73f51c48a57ae92e3fdea6c7c74d1b3f
- SHA1 7d0083537e6b006b2451673ba71dbef056d6c33c
- SHA512 26d1aa9e1a26f4c8dac4ff5f8e4c0a76c0e55eaffeeecc5bc0275dc82063b0364511582ec25d2c2a47ec72247db7d695f6fefd6f4b391664aaa5724516eef1a3
- SSDEEP 49152:cPnNmjxVFmXFbHi3QVOzv/Oa/P1w3vXb:cPNCxGxim41w3vr
- TLSH T1D07533CBB00214E5F5445C702A7E2DB97E2D7E1328AA1826FEC4F5D5AABEDF18381117
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1