General
- Target 093421~1.EXE
- Size 3.9MB
- Sample260216-nwt4gads2b
- SHA256 2e4f7da403833e22c25e38ebbfba41bd81f1e6a1281ade9c8e0118b56a1fe3e2
- MD5 1570da0ad8cdd03ac5da82f163d6f256
- SHA1 870e9ee1adbf93a35395178cb0f6ae8842d1fcb9
- SHA512 348a45eec36b8408c38908342dd27d00d802c67886ef34b22e73b70994f3f9ae120cf36a594a6feb77b913f1765abda07d444428cbf167e97ba848d6abf33066
- SSDEEP 49152:RlOfSMm2cPA8p8ZaE4sUAh0kuzcxQqDZdaar8oWGGukhKljxY1za5OT4D:HcS/2cPb8yJAhNM0paW
- TLSH T101169E236601C51BD7120930C9649BB95D6CEC234B12F0CBB29C7ADDAAF61E31A375F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
093421~1.exe
Resource
win10v2004-20260130-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
093421~1.exe
Resource
win11-20260130-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 093421~1.EXE
- Size 3.9MB
- SHA256 2e4f7da403833e22c25e38ebbfba41bd81f1e6a1281ade9c8e0118b56a1fe3e2
- MD5 1570da0ad8cdd03ac5da82f163d6f256
- SHA1 870e9ee1adbf93a35395178cb0f6ae8842d1fcb9
- SHA512 348a45eec36b8408c38908342dd27d00d802c67886ef34b22e73b70994f3f9ae120cf36a594a6feb77b913f1765abda07d444428cbf167e97ba848d6abf33066
- SSDEEP 49152:RlOfSMm2cPA8p8ZaE4sUAh0kuzcxQqDZdaar8oWGGukhKljxY1za5OT4D:HcS/2cPb8yJAhNM0paW
- TLSH T101169E236601C51BD7120930C9649BB95D6CEC234B12F0CBB29C7ADDAAF61E31A375F9
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Remcos family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1