General
- Target PLITCH_Setup_476687726297747456_2.20.6.exe
- Size 107.6MB
- Sample260813-yehzzsda58
- SHA256 86589ccd69cc0c482536b647dc209a1b1f5b9d824e3478bf5a4e3664f64d73ef
- MD5 43693d9a0c0d777af9749ffea946b02d
- SHA1 ea42f63fbd128f6577c2d4804bce25f4962af9c9
- SHA512 eebc953c7cc124df4f89fa9eb2f8bfed03d3a997e561cc6129277ce7d5cd1e7385eb2cb496a4711ab7a1777a1ea580277a7d1f4f9531862a1c8d28b35f3f12bd
- SSDEEP 1572864:CydqLkJ7+j2bCC3U3GggpNcD2gZka3t2nKJ+j+mE08+De1WD/hlnkard9CJAA3pv:mVj2bj3ovgpkFAo+j8+Dbzhjd4pHeTY
- TLSH T169383337B117AA7AF11E973014B19201667BAF42BC5389ABA2E9446CCF175E07D37383
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
PLITCH_Setup_476687726297747456_2.20.6.exe
Resource
win10v2004-20260513-en
25 signatures
150 seconds
Malware Config
Targets
-
- Target PLITCH_Setup_476687726297747456_2.20.6.exe
- Size 107.6MB
- SHA256 86589ccd69cc0c482536b647dc209a1b1f5b9d824e3478bf5a4e3664f64d73ef
- MD5 43693d9a0c0d777af9749ffea946b02d
- SHA1 ea42f63fbd128f6577c2d4804bce25f4962af9c9
- SHA512 eebc953c7cc124df4f89fa9eb2f8bfed03d3a997e561cc6129277ce7d5cd1e7385eb2cb496a4711ab7a1777a1ea580277a7d1f4f9531862a1c8d28b35f3f12bd
- SSDEEP 1572864:CydqLkJ7+j2bCC3U3GggpNcD2gZka3t2nKJ+j+mE08+De1WD/hlnkard9CJAA3pv:mVj2bj3ovgpkFAo+j8+Dbzhjd4pHeTY
- TLSH T169383337B117AA7AF11E973014B19201667BAF42BC5389ABA2E9446CCF175E07D37383
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Adds Run key to start application
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1