General
- Target e13e7a543d58ef7e32242308a5d05a22.exe
- Size 350KB
- Sample260721-g383msgx6n
- SHA256 573e68608bbbf05cd7364eb791141deb3daba35b3098d23a047ac66979c75be1
- MD5 e13e7a543d58ef7e32242308a5d05a22
- SHA1 351fd3e3f4dc7e8569c1efdac1f6776f0aa8e621
- SHA512 c118476985e4d16d267e8ce65f48317f43bd0c1cb718bd681f1e6750d1774ec98fa8fcfda0e5c1a532295d499ec7828b6c3612689603fe68477a9df59dcccd73
- SSDEEP 6144:OVzk6qoefRnZqo5yf5vlNmwH8BmOeyXJWvT9/LRZr3V3HdZ:Ouz3yBvl8wcXovB/Lj3bZ
- TLSH T1E5740257FBE034F9E5369A38C4A04624D772F67D1790AE6F0768425B2F262C49C3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e13e7a543d58ef7e32242308a5d05a22.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
e13e7a543d58ef7e32242308a5d05a22.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e13e7a543d58ef7e32242308a5d05a22.exe
- Size 350KB
- SHA256 573e68608bbbf05cd7364eb791141deb3daba35b3098d23a047ac66979c75be1
- MD5 e13e7a543d58ef7e32242308a5d05a22
- SHA1 351fd3e3f4dc7e8569c1efdac1f6776f0aa8e621
- SHA512 c118476985e4d16d267e8ce65f48317f43bd0c1cb718bd681f1e6750d1774ec98fa8fcfda0e5c1a532295d499ec7828b6c3612689603fe68477a9df59dcccd73
- SSDEEP 6144:OVzk6qoefRnZqo5yf5vlNmwH8BmOeyXJWvT9/LRZr3V3HdZ:Ouz3yBvl8wcXovB/Lj3bZ
- TLSH T1E5740257FBE034F9E5369A38C4A04624D772F67D1790AE6F0768425B2F262C49C3AF21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1