General
- Target 70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775
- Size 2.6MB
- Sample260724-aa131azake
- SHA256 70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775
- MD5 6c2f276ba8851b48354db2f49ef57e80
- SHA1 0a682a81d461189d598695ddf3756dad92dd1695
- SHA512 cb7c50a6f81f36274ff27d96bc82f56164d9f1acd04b82f9fc4264f70061dff948ef535da12325128da9c75ee6284cc87d610fcfb6cdd60ebc0906d8fcb38a48
- SSDEEP 12288:xB1PLvjJtIGuYsl4wcxOSKyiG//87gRgYafcCxlNv//8G0pDdly8ECd9EgenPvq:xBfzml5c6yiHCPc/5vXL0pCC0gePvq
- TLSH T1E5C5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775
- Size 2.6MB
- SHA256 70705bce0d1386b78ed87f9fe71770106c31116195310837bff6f195451a1775
- MD5 6c2f276ba8851b48354db2f49ef57e80
- SHA1 0a682a81d461189d598695ddf3756dad92dd1695
- SHA512 cb7c50a6f81f36274ff27d96bc82f56164d9f1acd04b82f9fc4264f70061dff948ef535da12325128da9c75ee6284cc87d610fcfb6cdd60ebc0906d8fcb38a48
- SSDEEP 12288:xB1PLvjJtIGuYsl4wcxOSKyiG//87gRgYafcCxlNv//8G0pDdly8ECd9EgenPvq:xBfzml5c6yiHCPc/5vXL0pCC0gePvq
- TLSH T1E5C5E28D775D41ACC56244B210F10A92A7B9DB16A3E85E071BC6CC788E120DDBBBDBF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects the extracted x64 multi-cryptocurrency clipboard hijacker payload.
Detects the extracted x64 multi-cryptocurrency clipboard hijacker payload.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1