General
- Target PresenterH103_xp.exe
- Size 5.3MB
- Sample260730-g82krasbra
- SHA256 ae89e8db10bc5d62e14154602811bbffd8cc635e0c66148f802048024ae75ec7
- MD5 1945ff45af6ccbdd7ae23013b5522944
- SHA1 8d061c232631f47aa3f902b5b3ab05f421df49fd
- SHA512 3d8b0de77401834d06d93145ee97c38e588520cf47c2c4f8d477cf147a3922f6d7f8394c9ab0f3ae8ef7a86d3bc4821c3f2e2002a198bad1fd0be906d83d864f
- SSDEEP 98304:2APLBVTSVfMOKmTRJfgbo++BsFb/cSnK3uaQkfMyMpgFLOAkGkzdnEVomFHKnPvE:XTwMeu+BsFb/a3u9cMyMpgFLOyomFHKk
- TLSH T1FA46E1537E4D406AC02212718F5A3B78663FBE606A3606B722947F2FBE307439E5D527
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PresenterH103_xp.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
PresenterH103_xp.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target PresenterH103_xp.exe
- Size 5.3MB
- SHA256 ae89e8db10bc5d62e14154602811bbffd8cc635e0c66148f802048024ae75ec7
- MD5 1945ff45af6ccbdd7ae23013b5522944
- SHA1 8d061c232631f47aa3f902b5b3ab05f421df49fd
- SHA512 3d8b0de77401834d06d93145ee97c38e588520cf47c2c4f8d477cf147a3922f6d7f8394c9ab0f3ae8ef7a86d3bc4821c3f2e2002a198bad1fd0be906d83d864f
- SSDEEP 98304:2APLBVTSVfMOKmTRJfgbo++BsFb/cSnK3uaQkfMyMpgFLOAkGkzdnEVomFHKnPvE:XTwMeu+BsFb/a3u9cMyMpgFLOyomFHKk
- TLSH T1FA46E1537E4D406AC02212718F5A3B78663FBE606A3606B722947F2FBE307439E5D527
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1