General
- Target _d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9.exe
- Size 34.0MB
- Sample260420-lcdw2aav4x
- SHA256 d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9
- MD5 d916af66dcf63d62c4360943b12ca5e3
- SHA1 b30b4f4424f6c444755b4a9bbd652360f964f0a4
- SHA512 56fd45614fc06aaf0aef62061a36fe7338df5f4c0b21aad577fc9fb3c0f838fad4a01bad901a9673e45480d0bcdfe73a8a44579e8e25ad596f647c769da77edf
- SSDEEP 786432:OYO/jkCgBhtUKPUOFMJGe5cfD7aR65lIBE7ZVWhro/fraaXcR:K/jkCgpPUK8PyL7M8aE1VWhroHFcR
- TLSH T175773324FAA16DBEDF33D5FCC4464147AA5AA4A70389121327F149E68F207D0852FFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
_d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9.exe
Resource
win10v2004-20260130-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
_d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9.exe
Resource
win11-20260130-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target _d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9.exe
- Size 34.0MB
- SHA256 d07e48477a7e3386237ebb696e1e2ccb53ae5561ded38703766ef10453ceafe9
- MD5 d916af66dcf63d62c4360943b12ca5e3
- SHA1 b30b4f4424f6c444755b4a9bbd652360f964f0a4
- SHA512 56fd45614fc06aaf0aef62061a36fe7338df5f4c0b21aad577fc9fb3c0f838fad4a01bad901a9673e45480d0bcdfe73a8a44579e8e25ad596f647c769da77edf
- SSDEEP 786432:OYO/jkCgBhtUKPUOFMJGe5cfD7aR65lIBE7ZVWhro/fraaXcR:K/jkCgpPUK8PyL7M8aE1VWhroHFcR
- TLSH T175773324FAA16DBEDF33D5FCC4464147AA5AA4A70389121327F149E68F207D0852FFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies file permissions
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
File and Directory Permissions Modification
1Impair Defenses
1Disable or Modify System Firewall
1