General
- Target ISq8PE2cxO.exe
- Size 23.2MB
- Sample260720-vaycbsat2w
- SHA256 14c576d5f65012336c506d55558c39f7829fd6be7759c5796543646f7a9ebe32
- MD5 f82c9cddf856b792db2ce75d682121e9
- SHA1 1b14da004ea26bc7061cf2622d30de1ab636446d
- SHA512 52f10744a0d74008a8f25658d511ba425c6de5b10843d33e9617eb70140a492ed106820cebcc37c0ce01a4b6aa41100fac82abdeeca1f5522670bbe38da32b18
- SSDEEP 393216:LsrZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MAb:+ZF4Zu/9OIkDe1A14UygaWhwFB/14Min
- TLSH T11837332027E80655D2BE8F79C2B40492CB75BB07964AEB4F3C8D70EE1B62781CD5176B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ISq8PE2cxO.exe
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
ISq8PE2cxO.exe
Resource
win11ltsc2024-20260710-en
7 signatures
900 seconds
Malware Config
Targets
-
- Target ISq8PE2cxO.exe
- Size 23.2MB
- SHA256 14c576d5f65012336c506d55558c39f7829fd6be7759c5796543646f7a9ebe32
- MD5 f82c9cddf856b792db2ce75d682121e9
- SHA1 1b14da004ea26bc7061cf2622d30de1ab636446d
- SHA512 52f10744a0d74008a8f25658d511ba425c6de5b10843d33e9617eb70140a492ed106820cebcc37c0ce01a4b6aa41100fac82abdeeca1f5522670bbe38da32b18
- SSDEEP 393216:LsrZF4vRTy/9OIkDesQEUA14iLlyt+aW3hwF5rDbFh1+1f0p78yn+O8MAb:+ZF4Zu/9OIkDe1A14UygaWhwFB/14Min
- TLSH T11837332027E80655D2BE8F79C2B40492CB75BB07964AEB4F3C8D70EE1B62781CD5176B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1