General
- Target mw3.exe
- Size 3.7MB
- Sample260622-3f5btsht6y
- SHA256 f4c500ce295f1ff2865f7f7b0b2cb4cfe3b7955fa54f171442991bbb9d3d742a
- MD5 0bc89d68e1e4d33337dbc5596737f0b5
- SHA1 fb78aca8ee3cccbd5c37f014fd45516b3f379219
- SHA512 3a3a722a704e516b619af7115613a14f5300f04323f69b2f15e093fb661323ffb98d5d1104ce11fe72a41a1a84ed0a6289d867452ffd5db1eae600a67d34da57
- SSDEEP 24576:dMcKl40Bv4kOdGcNqFjokufAYth7OSt9CVMXkSJdzcxbDkel3dGcNqFjokufAYte:d29BvtchdTOZVZGdzvchdTOZVZGdz
- TLSH T123064A1AD6ED985FE1F662B592441930C0A1DAE7810EC8DE319E7FECDD66C006D18ECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
mw3.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target mw3.exe
- Size 3.7MB
- SHA256 f4c500ce295f1ff2865f7f7b0b2cb4cfe3b7955fa54f171442991bbb9d3d742a
- MD5 0bc89d68e1e4d33337dbc5596737f0b5
- SHA1 fb78aca8ee3cccbd5c37f014fd45516b3f379219
- SHA512 3a3a722a704e516b619af7115613a14f5300f04323f69b2f15e093fb661323ffb98d5d1104ce11fe72a41a1a84ed0a6289d867452ffd5db1eae600a67d34da57
- SSDEEP 24576:dMcKl40Bv4kOdGcNqFjokufAYth7OSt9CVMXkSJdzcxbDkel3dGcNqFjokufAYte:d29BvtchdTOZVZGdzvchdTOZVZGdz
- TLSH T123064A1AD6ED985FE1F662B592441930C0A1DAE7810EC8DE319E7FECDD66C006D18ECB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1