General
- Target win-tr150-1_6-n_mcd.exe
- Size 19.9MB
- Sample260803-phy1yaaq2t
- SHA256 04ef9137ea0ccf960e4f0f3ef815436d280d6a5e1ec4d09e8555fcd078fc0578
- MD5 dc5e4cc47f3861016901a196c58ea732
- SHA1 7cb195ece904c21ef1ef77cd20c5e3a44d65bb94
- SHA512 776e248c71fb93e73c76a8877739b8c680cd5db26975403156ddada7fbb2413a7a954a79c71edae204a817876bcfb277c60f5ccdc411a1cadf79afd5f189cf67
- SSDEEP 393216:tR0AZMSKVOJaZ3Z/dTxgpU3CtdESM2L35J7jSvqRP3wBWyVtbdMkYvTqyOd66G0T:tR0ede4aZ/Fx+AMqGLTjCqliPqT666G0
- TLSH T11D273351BC5A8C36E2E70B3F52C58E415E2A372D0BA164DB23C5238EFE7B7C01B65859
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
win-tr150-1_6-n_mcd.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
win-tr150-1_6-n_mcd.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target win-tr150-1_6-n_mcd.exe
- Size 19.9MB
- SHA256 04ef9137ea0ccf960e4f0f3ef815436d280d6a5e1ec4d09e8555fcd078fc0578
- MD5 dc5e4cc47f3861016901a196c58ea732
- SHA1 7cb195ece904c21ef1ef77cd20c5e3a44d65bb94
- SHA512 776e248c71fb93e73c76a8877739b8c680cd5db26975403156ddada7fbb2413a7a954a79c71edae204a817876bcfb277c60f5ccdc411a1cadf79afd5f189cf67
- SSDEEP 393216:tR0AZMSKVOJaZ3Z/dTxgpU3CtdESM2L35J7jSvqRP3wBWyVtbdMkYvTqyOd66G0T:tR0ede4aZ/Fx+AMqGLTjCqliPqT666G0
- TLSH T11D273351BC5A8C36E2E70B3F52C58E415E2A372D0BA164DB23C5238EFE7B7C01B65859
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.