General
- Target 472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae
- Size 2.5MB
- Sample260620-gqtr7aew5x
- SHA256 472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae
- MD5 8714dba5fba9544a282922529d5ee3fb
- SHA1 7123ea325a26a9285e8a480cceeff9059136bbc5
- SHA512 00d0457e671befc9cb801684c6615c0904e636a3289a0fd806395f730afe0a2a76b13570cf6403395121152d811d05e1c482c757b7d9d2a51b2f88115fe22db9
- SSDEEP 24576:pLksxMml5c6yiHCPc/5vXL0pCC0gePvqC:9nMmZyHcWC4eN
- TLSH T1F0C5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae.exe
Resource
win11ltsc2024-20260618-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae
- Size 2.5MB
- SHA256 472db8d633e8a9a0c3a2d19ff44f08abdb28487664c8dbb17b013a28dc7e92ae
- MD5 8714dba5fba9544a282922529d5ee3fb
- SHA1 7123ea325a26a9285e8a480cceeff9059136bbc5
- SHA512 00d0457e671befc9cb801684c6615c0904e636a3289a0fd806395f730afe0a2a76b13570cf6403395121152d811d05e1c482c757b7d9d2a51b2f88115fe22db9
- SSDEEP 24576:pLksxMml5c6yiHCPc/5vXL0pCC0gePvqC:9nMmZyHcWC4eN
- TLSH T1F0C5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1