575df6384ac5f0cfe7357d02e861fdce3ff898141eb158ddc867ca61fad6157f | Triage™

Login
Reports

Overview

overview

7

Static

static

3

all in one loader.zip

windows10-2004-x64

1

all in one loader.zip

windows11-ltsc_2024-x64

1

all in one...ne.xml

windows10-2004-x64

3

all in one...ne.xml

windows11-ltsc_2024-x64

1

all in one...recipe

windows10-2004-x64

3

all in one...recipe

windows11-ltsc_2024-x64

3

all in one...e.iobj

windows10-2004-x64

3

all in one...e.iobj

windows11-ltsc_2024-x64

3

all in one...e.ipdb

windows10-2004-x64

3

all in one...e.ipdb

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...s.tlog

windows10-2004-x64

3

all in one...s.tlog

windows11-ltsc_2024-x64

3

all in one...dstate

windows10-2004-x64

3

all in one...dstate

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...1.tlog

windows10-2004-x64

3

all in one...1.tlog

windows11-ltsc_2024-x64

3

all in one...or.obj

windows10-2004-x64

7

all in one...or.obj

windows11-ltsc_2024-x64

3

all in one...in.obj

windows10-2004-x64

7

all in one...in.obj

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
all in one loader.zip
Size 3.1MB
Sample260813-fac9tssalf
SHA256 575df6384ac5f0cfe7357d02e861fdce3ff898141eb158ddc867ca61fad6157f
MD5 3e6b1b848010e1956d337e94aad0a2df
SHA1 b67668682ab2cfd32b3051b9f60e87cf4a3e59da
SHA512 a78797ce48d285c2218b862ddf642a4cce5bc753409ef50f15227d4a3f4d6dafc325f0c350caf2c8777680c94c54fe1ba0b5a9d04a34ce1008e6ee425f35cb7d
SSDEEP 49152:ZmACJz9CSjMKgm9hmItaGErFBwI2dBArVEryGH88sKX22DMRFhTK9wWPcCOI:RCpYNKgoh8TrFKI2z+OS81DM3dK9wWuI
TLSH
T14DE533009E854DC9FAA0693BC1E73D03DBD7CEE7E01996647C18F1885E9B0993A18DDE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

adware discovery execution spyware

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

all in one loader.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

150 seconds

Behavioral task

behavioral2

Sample

all in one loader.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral3

Sample

all in one loader/allinone.xml

Resource

win10v2004-20260513-en

windows10-2004-x64

5 signatures

150 seconds

adware discovery spyware

Behavioral task

behavioral4

Sample

all in one loader/allinone.xml

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

150 seconds

Behavioral task

behavioral5

Sample

all in one loader/allinone/x64/Release/allinone.exe.recipe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral6

Sample

all in one loader/allinone/x64/Release/allinone.exe.recipe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral7

Sample

all in one loader/allinone/x64/Release/allinone.iobj

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral8

Sample

all in one loader/allinone/x64/Release/allinone.iobj

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral9

Sample

all in one loader/allinone/x64/Release/allinone.ipdb

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral10

Sample

all in one loader/allinone/x64/Release/allinone.ipdb

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral11

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.command.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral12

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.command.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral13

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.read.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral14

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.read.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral15

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.write.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral16

Sample

all in one loader/allinone/x64/Release/allinone.tlog/CL.write.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral17

Sample

all in one loader/allinone/x64/Release/allinone.tlog/Cl.items.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral18

Sample

all in one loader/allinone/x64/Release/allinone.tlog/Cl.items.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral19

Sample

all in one loader/allinone/x64/Release/allinone.tlog/allinone.lastbuildstate

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral20

Sample

all in one loader/allinone/x64/Release/allinone.tlog/allinone.lastbuildstate

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral21

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.command.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral22

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.command.1.tlog

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral23

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.read.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral24

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.read.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral25

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.secondary.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral26

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.secondary.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral27

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.write.1.tlog

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

150 seconds

Behavioral task

behavioral28

Sample

all in one loader/allinone/x64/Release/allinone.tlog/link.write.1.tlog

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral29

Sample

all in one loader/allinone/x64/Release/emulator.obj

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral30

Sample

all in one loader/allinone/x64/Release/emulator.obj

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Behavioral task

behavioral31

Sample

all in one loader/allinone/x64/Release/main.obj

Resource

win10v2004-20260513-en

windows10-2004-x64

7 signatures

150 seconds

Behavioral task

behavioral32

Sample

all in one loader/allinone/x64/Release/main.obj

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

150 seconds

Malware Config

Targets

- Target
  all in one loader.zip
- Size 3.1MB
- SHA256 575df6384ac5f0cfe7357d02e861fdce3ff898141eb158ddc867ca61fad6157f
- MD5 3e6b1b848010e1956d337e94aad0a2df
- SHA1 b67668682ab2cfd32b3051b9f60e87cf4a3e59da
- SHA512 a78797ce48d285c2218b862ddf642a4cce5bc753409ef50f15227d4a3f4d6dafc325f0c350caf2c8777680c94c54fe1ba0b5a9d04a34ce1008e6ee425f35cb7d
- SSDEEP 49152:ZmACJz9CSjMKgm9hmItaGErFBwI2dBArVEryGH88sKX22DMRFhTK9wWPcCOI:RCpYNKgoh8TrFKI2z+OS81DM3dK9wWuI
- TLSH
  T14DE533009E854DC9FAA0693BC1E73D03DBD7CEE7E01996647C18F1885E9B0993A18DDE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  all in one loader/allinone.vcxproj
- Size 2KB
- SHA256 d8bb2554c263909d964c9e6abe999bf16126b2899a455963ffc2b982959fac43
- MD5 acc3c4a5542a0de0903f0ed0b412e310
- SHA1 28bebb005dda15ee577dbb7077b98e83caab6a93
- SHA512 cb322f0c65ae8e51e5a6facc656ca0a51495b0d10b6a26690d433070ac81d437d82d85ba36f6e89dc43a39b9d0cdf9181a8803b2362197c2d693b6ef16f74e36
- TLSH
  T11851EE50E4F88A66D1E24237A2D748019FB1D3C71D9A086CF59ED79A1F176486323B73
- MD5 SHA1 SHA512 TLSH
Score

3^/10

adware discovery spyware
behavioral3 behavioral4
- Target
  all in one loader/allinone/x64/Release/allinone.exe.recipe
- Size 321B
- SHA256 5e39ba08503a218eb28cc88cd1b1dd899e0eee4a5676369bd53195268b6464da
- MD5 b7e6c166d6407257127e801dbfbbef1f
- SHA1 2ecc3534ad3f5bd4cb031d1e6349ae1740e712cb
- SHA512 729cfa40c81d145636746ce61d8f1ebbaa397eb8f893ef498400ce1ce6f5798969c83590c390d51a4a08d382061b8848dd38beb21a912a18981f3b68ce65c794
- TLSH
  T1F8E08C6659C4F6816BB05216E2BE8E6DFF1BAE931A340CA03094CEBF5F8304445538AB
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  all in one loader/allinone/x64/Release/allinone.iobj
- Size 4.9MB
- SHA256 f7bbf2c0d43249b5086f15e05058d43bf776c04551b81642dde240b965ba77e8
- MD5 d26b15fea06d2f97d07d46171b6aaa7c
- SHA1 4f9cc58a28b83e4645c895e228a1c4cc744040b8
- SHA512 3225f5da657ef844c75d7d2b12257ea3fae8ac4014edcd4c11fd2ad0d1d5cff365925691b55827a0d89a662a8b3b57ee4d705376ac8213ede23590fa3114cf02
- SSDEEP 98304:sqY/AOvUpa/RvkpJoRneNcaBzt29z++O62xS2llufJHomcwFWpIXvveotxqMEJ8t:+mmQpIXvvl
- TLSH
  T1EE362A0276A8CA23D93EA3B1D0DB413DB371F9439F9B5B47B68FA0746E57348654B820
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  all in one loader/allinone/x64/Release/allinone.ipdb
- Size 2.3MB
- SHA256 8dae86bdbf698a2742951a6d1d10c48654737b7c71ef14b39a8ac9379c465022
- MD5 017349d69dc60c21050be6185a3dbc44
- SHA1 e2d29c8185d2172aa3dcb2f287e673744a776edb
- SHA512 5b66ca9e10dafb823c4f85bad10fd2cfde5533aa7cde1dc793b19a8244cd4c6c8105eb28d3537d5ba985943b0a3080625fbf28a736531835b64b401464f7982a
- SSDEEP 6144:SH/oM+w9VTbMWTNWT+xcQlL/JFHa+j4jFRr3nJknA/tNHrrqFIbE1w3Wqb76jHrM:0xTN/i47POF53unOT4hjv
- TLSH
  T10FB5632967968FB2C449133244DB5F11B7B0ED850B0BAF0732DAD42F2FA33957A5B498
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral10 behavioral9
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/CL.command.1.tlog
- Size 1KB
- SHA256 ce9797450776b56918fcaf1675913f37392250cb4c489566f526feac7e307971
- MD5 f29290b02d63b983365f2df2291890b6
- SHA1 4bd401c527a0f715b36db8866b1134ba4046c4bf
- SHA512 f8b5030333d481a9e29cdca17433c8af1adb1b5dbbe6691f16efcdccf750a35fed5468b7e77ac133195cd15bbe7937f49b086a70b1717924527b8180698ca39f
- TLSH
  T12231D42031EC724EA36136BD8FEBC0AF8B747BA58A77453F50B0410746B4D05AE10B72
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral11 behavioral12
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/CL.read.1.tlog
- Size 98KB
- SHA256 5c3ff8d84f972021798e5366d51b1a959bd33ae549edf550beb2573367206043
- MD5 c592c21c502300ab465f60e97f926d1d
- SHA1 e3360c8e506b4a63b298972fa5dd1cc181c9f8f2
- SHA512 6bb460e02d463acba34812eece3883384370796757965c286d26f384b14d2f32b55346641ed135fbb0eedf559aa4d1bb4769816ca130a8e6adad747a0f43c898
- SSDEEP 192:gLVNFrDRD/ovgKXFarwATI/4LUqDuMhZoVMiMSD7zVvrDRD/ovgKXFarws4LEztu:0NFrDRDgvwFr5eVvrDRDgvN
- TLSH
  T13AA3361970EA23482313B2C6DBCFA95BD727F2B8D63B576F2195130303916175A82FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral13 behavioral14
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/CL.write.1.tlog
- Size 1KB
- SHA256 24064881d268aa637bbac9e01fa4c12f630489e974c2cdd51573b44e22256202
- MD5 19ad3a85d371fcfdf24aef6111f656a3
- SHA1 e42b3cacfaa478a18d0664dd90e3a6c24bd5e355
- SHA512 3bb63ee6404df261ed03baf6fbe75a212b735c0fe183a84b42c6915f7e1d1fc62abfff345a7867e8aec35fa2dc3eca0a949a6ed3897881d783b3edafd8e1420f
- TLSH
  T1B721723574DC729E470630F14FD6C5BCCB217A92DA3B6A3F60D6921357E881A0B00BB2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/Cl.items.tlog
- Size 304B
- SHA256 3df81b0340c1671bd9c17800c9d104677e62dc9d63664bd282495ceca5e0fa91
- MD5 2d807e405b110387fb4ed70f02300038
- SHA1 55d9ddbf531c701508f4fa7b259093738ed855b6
- SHA512 a907299e4aa0057c10a65389fc5d0b092ac73d92aeb71f0fad4ff3d6fe9643793e7dc0185a11a7821d0d14401d029091d74373412d9e5f7abcdb9030cb0abae4
- TLSH
  T1A3E048151275DF4A0600B107C3F6011C7E62CC525D71715153E446A6F5C1950C6B249C
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral17 behavioral18
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/allinone.lastbuildstate
- Size 300B
- SHA256 6f73fff11525a50cea41841b4410a9d73f589a470ac16ea97c77b27f8f6bc029
- MD5 c1db5840284daa3b896e53fe15932fb5
- SHA1 42761cd471d83eddad071ee00ff9dbe3df9cafcf
- SHA512 0042b48d97ee7a8ef3f18ef5a81133ce9b3f1404979efa58fd6887d9f198b5466d6f043f3b697f45b29e974037925d029f54d8b43dd1e908d09b395f669fe878
- TLSH
  T1DAE0C20CB5E07EF655E1A231C0E1010D63BDEA512874704CBBB1928DEFDA81C117A179
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral19 behavioral20
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/link.command.1.tlog
- Size 1KB
- SHA256 fd05b310ce362548f4f7c0b9a638c8a5de70dfdee494a4e4323731d68faca0b9
- MD5 723090e79e44811326a127160d632422
- SHA1 4e565b357920f3fa6040d357d459c9121ae82e0d
- SHA512 5b79ea379bac0c8da0247b78d9960a92756951a298c0f8086c318789fffa535ea7573064488dd6c3b37ee95137f030ad2192346413d70f9be4f43ad1a1296ab7
- TLSH
  T132416D3930DC325E871670A50FE6C1BECB293B56E67B473F18E0859B43A6946AB01B71
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral21 behavioral22
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/link.read.1.tlog
- Size 4KB
- SHA256 1ec214b195ea9869b9f444bc462a7afce12da19e6b70e020550a270f6516b9be
- MD5 2b0d2297547dd99b45ee94c8bc4c56a9
- SHA1 05233b1881ab837484508bc929aea5517ba72063
- SHA512 9ec53e0975467ef9e7b9cc0f04a5a9304e98bdb572393b72d098bf3ac1e063c3bfb5b6f1dd8e32ef5b49156a2e088fdff607a84e63e70d9038e9823da38b7c99
- SSDEEP 96:gxIg3wtYwAwt1Zl9dtPp/CxL7RrmJUMu6PKZgvov:gxIgGXCxLyAv
- TLSH
  T14DA17C3970EA33491306B2C18BCBA16BD723B665EA3F173F54D14387039251B9A02FAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral23 behavioral24
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/link.secondary.1.tlog
- Size 354B
- SHA256 bd66309bc742029b459088a601afe6b3f63a7b907953fd45286ce2097875aef1
- MD5 6ab973c28cbb2a551d99aba7be9e0d11
- SHA1 9e8b500c2621ac5803b90229e0d88626119d4e72
- SHA512 36a6a13b4d380500d3c1607375daf3d90984f84ee11edc7ba0ad9387d7bd1295fb9a7fe96be036387bf0144fffed28bf6b07606302e19f855334456b53082642
- TLSH
  T127E0926402A88BCD1F016B07C7F6474CFD51AB227DB011258AC1DBD5B1C5186CE6608D
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral25 behavioral26
- Target
  all in one loader/allinone/x64/Release/allinone.tlog/link.write.1.tlog
- Size 510B
- SHA256 ecaaa998c024c51f5bd83908d8580ecaa766550dbe44c407594d237d0367865b
- MD5 3ddfb15fc389088a6ad00a7602a9634e
- SHA1 c6381b2db141c12b7aa89ab46f7d1e54e8cf7136
- SHA512 7b4562249d2f9d3d620c654da058c04c3b644207dafd1b23e5d0bc9ecdf6483ef1a434ab8bf4f2b6cff126fa6fcbde933d0383dfd84a7e9fb23b61a584ef04c2
- TLSH
  T113F0AE3930E8729F470630B14FD2D1BCCB213B92D97B663F6481961753D480A0B00AB2
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral27 behavioral28
- Target
  all in one loader/allinone/x64/Release/emulator.obj
- Size 2.7MB
- SHA256 c27fd6b61a374427bc2a676b82a295c8d3298b2f62492f58020127bd39a9dfd6
- MD5 eb384e65a20f7aad0076dce12536786c
- SHA1 5f0b97b7e1e3d6a3d32766e9a3b8b289826c09d2
- SHA512 8bd8d9707c971a030767c73b3bf35dfdc1b6be34db9d51803d1bb9af664f6592cd04b897304e2262d27ed5cb1cd416b3e4880c52a303095e52ab165c0c2f92f0
- SSDEEP 49152:GWVwz4oBQX/xKDL68RKg6KBBO+YD6xjelCwdgboO9RHYlHmBNaqaaxzH7KwWV2S8:GW0e4boO9RHYlHmBNaqaaxzH7KwWV2v
- TLSH
  T116D519114AA48547D9796E72D0AF173A3B21C89AF810E783C2BFC42E0DA93DE43D7675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral29 behavioral30
- Target
  all in one loader/allinone/x64/Release/main.obj
- Size 2.0MB
- SHA256 8d2bf98bd38c90d2721b67f0e98b0b83e2f7bd13bde3204ec41003bafb8a94ed
- MD5 eb5c97bf3734c5932c17cb9b76aec121
- SHA1 cdc9b51344dc4957b76b2b2bab9b39b2044aa68c
- SHA512 3ecc11484a2d1c9a2544b3b63c325f00632c9680fad8cabb7151961a2347077249f8e062025d44c393c14cbc5b36a8bdaa03fa1f53c02e971121d9bef9140c38
- SSDEEP 49152:42Vf8GyomysYva3ZAGgWK3pP3vPIXzU/SnzGV1PfVuQn+WvO/YitSulIjTZRdfo3:42Vji3LU/SnzGV1PfVuQn+WvO/YitSun
- TLSH
  T1D3A5E8110DA4CA47E8696EB1E05B172A7B61C49EB414E783C3BFC46E0CA93DE07E3675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

adwarediscoveryspyware

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32

© 2018-2026

Terms | Privacy