General
- Target 87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3N
- Size 88KB
- Sample241111-w2bhbatcqd
- SHA256 87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3
- MD5 359a814deafda7ff8cf4876380971ae0
- SHA1 ec4614e5d0ddcdc695e4f4a3b41ea58360ee0274
- SHA512 64f438183f24f04ef7ebb8923c7983edc3398580fada1cefb1fdf6d1dbe8c22a0c05773fc3aafab9a77f737baa048085e30f79e92cb237b19afe7850acb016a2
- SSDEEP 768:PO6jxOJETcKSMTfIHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvdzsXjLft+9o1xl:POcx/AK6LFUnzJA5o9BfIdoXjLl0yl
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3N.exe
Resource
win7-20240903-en
9 signatures
120 seconds
Behavioral task
behavioral2
Sample
87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3N.exe
Resource
win10v2004-20241007-en
9 signatures
120 seconds
Malware Config
Targets
-
- Target 87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3N
- Size 88KB
- SHA256 87c3ec556492e74b6bc88f5648b800b0cd0cceb254de92b7d5fd73a27434eda3
- MD5 359a814deafda7ff8cf4876380971ae0
- SHA1 ec4614e5d0ddcdc695e4f4a3b41ea58360ee0274
- SHA512 64f438183f24f04ef7ebb8923c7983edc3398580fada1cefb1fdf6d1dbe8c22a0c05773fc3aafab9a77f737baa048085e30f79e92cb237b19afe7850acb016a2
- SSDEEP 768:PO6jxOJETcKSMTfIHpFeh6RM1rA8dOsk7jbqqRkA5okK1DfsvdzsXjLft+9o1xl:POcx/AK6LFUnzJA5o9BfIdoXjLl0yl
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2