General
-
Target
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d.exe
-
Size
274KB
-
Sample
241112-2jfxza1qhx
-
MD5
ddae2ffca8141c6cc6a4d4fb947ac7df
-
SHA1
58e5f6ed119539d591b54c74f005f9b3ccc32787
-
SHA256
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d
-
SHA512
8ad28559501b5fb2464481cc37212aa4954a76ccdb17bdc399a0449e2f362097933738a012f47ca10afbfa8f3ab604f71403996c6b0f1fe7ae3a34d302010b33
-
SSDEEP
6144:HGpV1z8QsGpGGpV1z8Qcy1PSbOqslVC7nJUkhIeMIcC16Vf:mpVaApPpVaxy0bOM7np+e31s
Static task
static1
Behavioral task
behavioral1
Sample
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d.exe
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d.exe
-
Size
274KB
-
MD5
ddae2ffca8141c6cc6a4d4fb947ac7df
-
SHA1
58e5f6ed119539d591b54c74f005f9b3ccc32787
-
SHA256
27454bcd6e022b3cc660c27ac802cdf308c765cee10b751ce19fdab760600a3d
-
SHA512
8ad28559501b5fb2464481cc37212aa4954a76ccdb17bdc399a0449e2f362097933738a012f47ca10afbfa8f3ab604f71403996c6b0f1fe7ae3a34d302010b33
-
SSDEEP
6144:HGpV1z8QsGpGGpV1z8Qcy1PSbOqslVC7nJUkhIeMIcC16Vf:mpVaApPpVaxy0bOM7np+e31s
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Impair Defenses: Safe Mode Boot
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Impair Defenses
1Safe Mode Boot
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1