General
- Target dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b
- Size 150KB
- Sample260706-kc5jbagw2p
- SHA256 dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b
- MD5 3dd50c0486a8bee19a3b7c230a7537fc
- SHA1 8c00b0eba55a110921e02ebf50aa1af29fcad5b7
- SHA512 6b72c5a7fb7ceeaed9cc4b0da8b0d3186ed5591ab6f54cb1de1fbb3add42b5c25c408991eb28a13d5f48d36e8fa7ed8952e0ea8a3bdb5a25df0b8d9d15ff2139
- SSDEEP 3072:NqqJZc6bh8KPa+EGLTcPqxBSkqoiDFWeK2VwBpSashD1RIQ1RQQ4ugxnw9Fkh/+q:gqJZc6bh8KPa+EGLTcPqxBSkqoiDFWe3
- TLSH T193E33F69B5BB9066D03FEFB13DD8B5DBEDFA2623B404A50704C1134B5D11E80EE868B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b
- Size 150KB
- SHA256 dc39b279146b5278a94e5a8cd857bb51277087d93a990fbf12ba91f88d0e435b
- MD5 3dd50c0486a8bee19a3b7c230a7537fc
- SHA1 8c00b0eba55a110921e02ebf50aa1af29fcad5b7
- SHA512 6b72c5a7fb7ceeaed9cc4b0da8b0d3186ed5591ab6f54cb1de1fbb3add42b5c25c408991eb28a13d5f48d36e8fa7ed8952e0ea8a3bdb5a25df0b8d9d15ff2139
- SSDEEP 3072:NqqJZc6bh8KPa+EGLTcPqxBSkqoiDFWeK2VwBpSashD1RIQ1RQQ4ugxnw9Fkh/+q:gqJZc6bh8KPa+EGLTcPqxBSkqoiDFWe3
- TLSH T193E33F69B5BB9066D03FEFB13DD8B5DBEDFA2623B404A50704C1134B5D11E80EE868B9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Drops startup file
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1