General
- Target ADZP 20 Complex.rar
- Size 61KB
- Sample260706-avbc3sgx7t
- SHA256 534523492a4ccb8fddaefc8db3fd30c6cc4752c51c2203319c6e378fd57ea216
- MD5 aaab539f8b904e5effb0457d94b2ba8c
- SHA1 12f7bc14d2b53feb673de44b7c5e11d8df4dcf5a
- SHA512 efa3c6928afee2cca9377318c5264bddff594e05ebb53e99bea6bcb8d709c1b6192ce10113aabd8a8b6d33b7987199219b79c73135559209d9c444d927bb2a2e
- SSDEEP 1536:duo5qtwI34HyN16C/stF7Yi5eaDZVOzHnzO/7+ceswGBH2ylamGh:Sprx/YdlDZVOzzeesCJh
- TLSH T14F530288E09046C57DF6443D9BD2A51C928F634077F1CF75A3C274E666E9403E0F63AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ADZP 20 Complex.exe
Resource
win10ltsc2021-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target ADZP 20 Complex.exe
- Size 106KB
- SHA256 6ca11c8b6442db97c02f3b0f73db61f58c96d52e8a880e33abee5b10807d993f
- MD5 8b6a377f9a67d5482a8eba5708f45bb2
- SHA1 7197436525e568606850ee5e033c43aea1c3bc91
- SHA512 644e51798399168530b05e629b414dd80cac678bd3c8d4a5d164f55736a2b2fd380d3ca4640f7a034c8f043c06b1527b473e2d17da088d5e97de6ea04120dd72
- SSDEEP 3072:v7DhdC6kzWypvaQ0FxyNTBfqMXERseQF8:vBlkZvaF4NTBSAesPF8
- TLSH T1B2B38D41F2E242F7EAF2053100A6712F973663389764E8EBC75C2D529913AD1A73D3E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Hide Artifacts
1Hidden Files and Directories
1