General
- Target 441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520
- Size 707KB
- Sample260812-ltvacaek4z
- SHA256 441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520
- MD5 5a8f52c934419da259ebd73db49e1311
- SHA1 9dd69c5fa310e95c76033589fcec9444125cbc9a
- SHA512 8776f915c42a09df1882f562fd3b43dede6b8cb850aa7483dc51fedd82ff378f64700493c4d13827097dc47c1407d2c99007b3e8f494b0c3c3dec6498d2f49ad
- SSDEEP 12288:QJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/rqJ8kRV8U9t:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJ8
- TLSH T144F48E26F2D0C473D123297DDC5B92A8A8597E912D296C863BEC3D4C5F3D3D1382A297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520
- Size 707KB
- SHA256 441d7d960f1b33dfcedc8dd971db94e17cdea42e6c973b7fefe66587b9053520
- MD5 5a8f52c934419da259ebd73db49e1311
- SHA1 9dd69c5fa310e95c76033589fcec9444125cbc9a
- SHA512 8776f915c42a09df1882f562fd3b43dede6b8cb850aa7483dc51fedd82ff378f64700493c4d13827097dc47c1407d2c99007b3e8f494b0c3c3dec6498d2f49ad
- SSDEEP 12288:QJ8kRV8U9frYgstcr1R2ydMQE5LJhNbeeE7xoD46mJvC7Q70xarj/rqJ8kRV8U9t:jGvrY3tcr1R2ydMQULhbeeE7xoD46mJ8
- TLSH T144F48E26F2D0C473D123297DDC5B92A8A8597E912D296C863BEC3D4C5F3D3D1382A297
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2