General
- Target DeadClient.exe
- Size 49KB
- Sample260627-mcvp8aax9r
- SHA256 c541556456a67d9d634b40b2cc5d1ea229527347ed910944d5c588bd26699f43
- MD5 6f49a9ab17f54b0003fa946e934a3d9a
- SHA1 ac2bae6cbe13dde43df5ae98fdf6279c1ea833c1
- SHA512 985db362727fd05cd3f9c62731307b788717608bc9580ad25e572dff2dbed11e84d2614edb84ff6b85f35304bfb35def211573712cc2d97344eb16ed93ad1493
- SSDEEP 1536:mpWQfEtzGtU8/OUHUk73UxUEV0TplXOcSXOcxXOccXOc1XOc8VCBZUOGUk+8my6a:CWQfEtzGtU8/OUHUk73Uxp0TplXOcSXx
- TLSH T1FB33D6CDA7D54122D6BF5EB119B31248C7B06AD34817C62F7CD841CB2B2AB984681FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DeadClient.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
DeadClient.exe
Resource
win11ltsc2024-20260617-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target DeadClient.exe
- Size 49KB
- SHA256 c541556456a67d9d634b40b2cc5d1ea229527347ed910944d5c588bd26699f43
- MD5 6f49a9ab17f54b0003fa946e934a3d9a
- SHA1 ac2bae6cbe13dde43df5ae98fdf6279c1ea833c1
- SHA512 985db362727fd05cd3f9c62731307b788717608bc9580ad25e572dff2dbed11e84d2614edb84ff6b85f35304bfb35def211573712cc2d97344eb16ed93ad1493
- SSDEEP 1536:mpWQfEtzGtU8/OUHUk73UxUEV0TplXOcSXOcxXOccXOc1XOc8VCBZUOGUk+8my6a:CWQfEtzGtU8/OUHUk73Uxp0TplXOcSXx
- TLSH T1FB33D6CDA7D54122D6BF5EB119B31248C7B06AD34817C62F7CD841CB2B2AB984681FE7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1