General
- Target HAHAware.exe
- Size 117KB
- Sample260812-p6qdpsxdqb
- SHA256 820ebc4d1365e9d3e364c3165db2d2e90e6eab5e788407241e20ca21b75be691
- MD5 07ab34b9f2919708c13f6577694133e9
- SHA1 4af01c94aeb8e621e6ccd4dc38897fa193183216
- SHA512 a6de7e2015e3bfd4bb628d5cd48ab57f6bbc207aaa8276bd0b2d2cd8f1f2b76eca365820dce8f2a662ffcfc812fd1a7deafe20f0ea5ad5001ca771fb6d5f1a9c
- SSDEEP 768:IcU659RrqHKYOXfKyiYiDBa85j13f9x7v9Sbh9Sb:IcU65XqqtPkYiDBFBl9x7vC
- TLSH T171C3A6539AEC3CC6C039A3B073BB93D0C72EED5562A2C18E96D00295D8BD59779327D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HAHAware.exe
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
HAHAware.exe
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target HAHAware.exe
- Size 117KB
- SHA256 820ebc4d1365e9d3e364c3165db2d2e90e6eab5e788407241e20ca21b75be691
- MD5 07ab34b9f2919708c13f6577694133e9
- SHA1 4af01c94aeb8e621e6ccd4dc38897fa193183216
- SHA512 a6de7e2015e3bfd4bb628d5cd48ab57f6bbc207aaa8276bd0b2d2cd8f1f2b76eca365820dce8f2a662ffcfc812fd1a7deafe20f0ea5ad5001ca771fb6d5f1a9c
- SSDEEP 768:IcU659RrqHKYOXfKyiYiDBa85j13f9x7v9Sbh9Sb:IcU65XqqtPkYiDBFBl9x7vC
- TLSH T171C3A6539AEC3CC6C039A3B073BB93D0C72EED5562A2C18E96D00295D8BD59779327D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1