General
- Target vcdx19ECdyOB.exe
- Size 21.0MB
- Sample260720-sdc5fsfy8x
- SHA256 ffb9f0fefdd64f78bbb755b6ac9dabc2e3a084752185dab6b62f866a6c797e77
- MD5 14fba135673b86d9e6280a409c1448ab
- SHA1 0b44aad8dd667e1811656f4d52d4aa99e89c67ce
- SHA512 1ba2093879e8e80770f253d9fc1cbd2c41b56654529a88c0d2c5b3a0a117257f5fd70220d7569f6b618bcfc6c84686ba829e841b06061c53d9ce3606af91a72b
- SSDEEP 393216:D0m0nJOgc0FMnVVPrdQllv7Y/XveHtWrL0n/:pgXIIlcdrLY/
- TLSH T170277C002FB8473AD2AE6772B8A162B047B1E817A312D74E64D4E5A53D537B5CE012FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vcdx19ECdyOB.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
vcdx19ECdyOB.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target vcdx19ECdyOB.exe
- Size 21.0MB
- SHA256 ffb9f0fefdd64f78bbb755b6ac9dabc2e3a084752185dab6b62f866a6c797e77
- MD5 14fba135673b86d9e6280a409c1448ab
- SHA1 0b44aad8dd667e1811656f4d52d4aa99e89c67ce
- SHA512 1ba2093879e8e80770f253d9fc1cbd2c41b56654529a88c0d2c5b3a0a117257f5fd70220d7569f6b618bcfc6c84686ba829e841b06061c53d9ce3606af91a72b
- SSDEEP 393216:D0m0nJOgc0FMnVVPrdQllv7Y/XveHtWrL0n/:pgXIIlcdrLY/
- TLSH T170277C002FB8473AD2AE6772B8A162B047B1E817A312D74E64D4E5A53D537B5CE012FF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1