General
- Target 601c25496c92e86210fc4351e46b9f5c.exe
- Size 498KB
- Sample260313-ty1xpads4t
- SHA256 ff8f55d4715752aec71f60d00612e36b172708d3fa61c5e131f96966f0dd5017
Score
10/10
Malware Config
Targets
-
- Target 601c25496c92e86210fc4351e46b9f5c.exe
- Size 498KB
- SHA256 ff8f55d4715752aec71f60d00612e36b172708d3fa61c5e131f96966f0dd5017
Score10/10-
Detects KeyzetsuClipper payload
-
Keyzetsu family
-
KeyzetsuClipper
KeyzetsuClipper is a Windows stealer written C#.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1