General
- Target 3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41
- Size 598KB
- Sample260803-rdxy7a1frd
- SHA256 3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41
- MD5 d32126bbc1939a0fdb9b26ea6b6718a9
- SHA1 76cf9039dde48e77d2c325a8becfa396d278e807
- SHA512 eca8647d471e8e92b4be8863b4cadb8a4635d3b67c33515df41903345e60f2264785e342073e2db379ef11f91b32d0792024830f070732a2618a133978d2c3f3
- SSDEEP 12288:zJ8kRV8U9frYgftcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/tn:iGvrYwtcr1R2ydMQULhbeeE7xoD46mJ1
- TLSH T117D48E26F39184B2D037293D8C1B62F8999D7EA12D196C463AE83D4D5F393D03D2A397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41
- Size 598KB
- SHA256 3615fce5ad0456b99444f99cc11fd5e56a4d64f65f0ec429ffb6ee1e44585c41
- MD5 d32126bbc1939a0fdb9b26ea6b6718a9
- SHA1 76cf9039dde48e77d2c325a8becfa396d278e807
- SHA512 eca8647d471e8e92b4be8863b4cadb8a4635d3b67c33515df41903345e60f2264785e342073e2db379ef11f91b32d0792024830f070732a2618a133978d2c3f3
- SSDEEP 12288:zJ8kRV8U9frYgftcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/tn:iGvrYwtcr1R2ydMQULhbeeE7xoD46mJ1
- TLSH T117D48E26F39184B2D037293D8C1B62F8999D7EA12D196C463AE83D4D5F393D03D2A397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2