General
- Target b06bf0a6b0db9cc75a124b1ae618e16928079e8d6ef979e3681d00085f5590a5
- Size 32KB
- Sample260804-xryqjacm7s
- SHA256 b06bf0a6b0db9cc75a124b1ae618e16928079e8d6ef979e3681d00085f5590a5
- MD5 06387f56fea29f034506b0422550876f
- SHA1 0a979266068a61183b1f9d47ec8d560144033e98
- SHA512 6a3c00597b52f368913827bf5c567a5d3541f4b853da348a82724f3af238768a13e42c01762a98c4c1052801b9ab9f254bb2070aefeed759779dbd2cf3e3873c
- SSDEEP 384:SWFJpEr144YAm87oSqwEuBrdkzDyBCgdL5I1svDOear0q3buUsYQxWCQf+1gwWkM:dpErmAaR/Er2z65I1sYwkbs4q12gwQ+
- TLSH T161E2290473E49625E2FE5ABD59329504833AF5435E23D79E2FD8A08F1623BC48F61BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
b06bf0a6b0db9cc75a124b1ae618e16928079e8d6ef979e3681d00085f5590a5.exe
Resource
win10v2004-20260513-en
11 signatures
60 seconds
Malware Config
Targets
-
- Target b06bf0a6b0db9cc75a124b1ae618e16928079e8d6ef979e3681d00085f5590a5
- Size 32KB
- SHA256 b06bf0a6b0db9cc75a124b1ae618e16928079e8d6ef979e3681d00085f5590a5
- MD5 06387f56fea29f034506b0422550876f
- SHA1 0a979266068a61183b1f9d47ec8d560144033e98
- SHA512 6a3c00597b52f368913827bf5c567a5d3541f4b853da348a82724f3af238768a13e42c01762a98c4c1052801b9ab9f254bb2070aefeed759779dbd2cf3e3873c
- SSDEEP 384:SWFJpEr144YAm87oSqwEuBrdkzDyBCgdL5I1svDOear0q3buUsYQxWCQf+1gwWkM:dpErmAaR/Er2z65I1sYwkbs4q12gwQ+
- TLSH T161E2290473E49625E2FE5ABD59329504833AF5435E23D79E2FD8A08F1623BC48F61BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1