General
- Target pw-free-online (1).exe
- Size 3.1MB
- Sample260810-phw7caybmh
- SHA256 f59c336d35a3aac0168c30c8e12bb8dcd819d9f668abf6d09bd9cab4e27199af
- MD5 11bd7c1cb8eacecb561705bb025cf910
- SHA1 b26bb632c8286820fb9688672bbf87950a59a769
- SHA512 4641f053f1f448f1819f4e72f93c57bea92d8cbad9e01fd9100819b8beaba25c9c91ca534ff0d136d4283ce3bbc72487a6d2364b7f98c8a17b18acc23f7e70e8
- SSDEEP 98304:TkL2991YnabfnLTccGEE7kc7EFaxNwVYtIre:Y2991OaDtQIc7E6NVme
- TLSH T13FE5D03BB2A4613EC97E0BF25573422059FFBA2964178C5A73F0458ECF2B4601E3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pw-free-online (1).exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
pw-free-online (1).exe
Resource
win11ltsc2024-20260709-en
28 signatures
150 seconds
Malware Config
Targets
-
- Target pw-free-online (1).exe
- Size 3.1MB
- SHA256 f59c336d35a3aac0168c30c8e12bb8dcd819d9f668abf6d09bd9cab4e27199af
- MD5 11bd7c1cb8eacecb561705bb025cf910
- SHA1 b26bb632c8286820fb9688672bbf87950a59a769
- SHA512 4641f053f1f448f1819f4e72f93c57bea92d8cbad9e01fd9100819b8beaba25c9c91ca534ff0d136d4283ce3bbc72487a6d2364b7f98c8a17b18acc23f7e70e8
- SSDEEP 98304:TkL2991YnabfnLTccGEE7kc7EFaxNwVYtIre:Y2991OaDtQIc7E6NVme
- TLSH T13FE5D03BB2A4613EC97E0BF25573422059FFBA2964178C5A73F0458ECF2B4601E3A657
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1