General

  • Target
    Full_Unboxing_Process_Inspection_Record_71307_2026.zip
  • Size 20.1MB
  • Sample260808-gy5jnavvhw
  • SHA256 3e9c711566a8e0d8dbebcb4fbaab1c395ce519f58efc3d81d58e431966807c72
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AppVIsvSubsystems64.dll
    • Size 224KB
    • SHA256 5e1042421ba29d16c34d686c701cb77cee14ff6c08984c7fa2a9860eea480259
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Full_Unboxing_Process_Inspection_Record_9862_2026.exe
    • Size 1.5MB
    • SHA256 afdb4a8384812e907a73b59df0fb303af2ba94994b5f4bbb66a51ce2b04e7c32
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks