General
- Target 90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1
- Size 618KB
- Sample260802-ksjlsayhpf
- SHA256 90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1
- MD5 249e3b3e1bb0b11f3667a144a8c30259
- SHA1 46422ead8a8dc3072fda780abb80a5159798d01a
- SHA512 41b64589ab290b5f7b2c85166085a0b672f65cdf475d97a47f2fe7812554cc07c104e3c35fbdf8f4c1a5f241ef3ef138a1348a50a8c4777a2168aa8cf5f3b382
- SSDEEP 12288:aJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/r+AwiCoS6I:dGvrY3tcr1R2ydMQULhbeeE7xoD46mJC
- TLSH T1AFD49E26B3A180B6D027143D8D5BA299DAB5BD912F146D8B37F83D491F3A3D0383A357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1
- Size 618KB
- SHA256 90ef6076ba5b3c488e206539c0798d816215bb9bbd8f9eada50cbec24bc171f1
- MD5 249e3b3e1bb0b11f3667a144a8c30259
- SHA1 46422ead8a8dc3072fda780abb80a5159798d01a
- SHA512 41b64589ab290b5f7b2c85166085a0b672f65cdf475d97a47f2fe7812554cc07c104e3c35fbdf8f4c1a5f241ef3ef138a1348a50a8c4777a2168aa8cf5f3b382
- SSDEEP 12288:aJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/r+AwiCoS6I:dGvrY3tcr1R2ydMQULhbeeE7xoD46mJC
- TLSH T1AFD49E26B3A180B6D027143D8D5BA299DAB5BD912F146D8B37F83D491F3A3D0383A357
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2