General
- Target 535ec55dd03c574541c9f6a5266fefad.exe
- Size 350KB
- Sample260721-g383msgx6k
- SHA256 f808b3e2570a2446b1483274e9aaf0d235580dbeacb2f129d5b52adc745a91a2
- MD5 535ec55dd03c574541c9f6a5266fefad
- SHA1 e2b318b2e438414f775ed35251e9e72fc2e0d7ee
- SHA512 ab0cbe5ef8266218290d06b4c1583223d5b6186e180add0dee5e9d80211da36265bf13a5a0d76e638a50a202fb48c21138e81ed99e9327e4c932b73c4b74cef1
- SSDEEP 6144:XVzk6qoefnPoDjo4ZYOVKS2bwJz8RmQf0WIiEnm2j7ZvINkn0srBQVkhHdZ:Xu3gDjoOktsORmQf07iSvN0hs/Z
- TLSH T12D74F147FEF035E9E12A523D84644A16E736F4BD06348E1F036C426A2F2A6D15E3AF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
535ec55dd03c574541c9f6a5266fefad.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
535ec55dd03c574541c9f6a5266fefad.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 535ec55dd03c574541c9f6a5266fefad.exe
- Size 350KB
- SHA256 f808b3e2570a2446b1483274e9aaf0d235580dbeacb2f129d5b52adc745a91a2
- MD5 535ec55dd03c574541c9f6a5266fefad
- SHA1 e2b318b2e438414f775ed35251e9e72fc2e0d7ee
- SHA512 ab0cbe5ef8266218290d06b4c1583223d5b6186e180add0dee5e9d80211da36265bf13a5a0d76e638a50a202fb48c21138e81ed99e9327e4c932b73c4b74cef1
- SSDEEP 6144:XVzk6qoefnPoDjo4ZYOVKS2bwJz8RmQf0WIiEnm2j7ZvINkn0srBQVkhHdZ:Xu3gDjoOktsORmQf07iSvN0hs/Z
- TLSH T12D74F147FEF035E9E12A523D84644A16E736F4BD06348E1F036C426A2F2A6D15E3AF31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1