General
- Target 22e02ddada9ef05322a466ef8d8935fe7cb3ab80cc3ed041689c9cbae4a3220c
- Size 228KB
- Sample260824-zlwp4acm5v
- SHA256 22e02ddada9ef05322a466ef8d8935fe7cb3ab80cc3ed041689c9cbae4a3220c
- MD5 f4e12136e70d03c66778c0819555dfd0
- SHA1 47ec1b0b42c11b0fa169cee1fe38358db872c899
- SHA512 b482d6baff972000edfd1f9b1aa9582f4b3e04fb8f0adf82a600aa45e83fd9c027a18db9def20a8a21902f510919b4d49dd81da23c7119f0ec3e6a4ddb00115c
- SSDEEP 6144:vKr8x3dwqsNy5ibpNjl4EqxF6snji81RUinKICr:yrcdQxl
- TLSH T19C34C7A77B709888F41815745CF3D3F23796EC4C4A4B42072A243E2A7FBBE652D25A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
22e02ddada9ef05322a466ef8d8935fe7cb3ab80cc3ed041689c9cbae4a3220c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 22e02ddada9ef05322a466ef8d8935fe7cb3ab80cc3ed041689c9cbae4a3220c
- Size 228KB
- SHA256 22e02ddada9ef05322a466ef8d8935fe7cb3ab80cc3ed041689c9cbae4a3220c
- MD5 f4e12136e70d03c66778c0819555dfd0
- SHA1 47ec1b0b42c11b0fa169cee1fe38358db872c899
- SHA512 b482d6baff972000edfd1f9b1aa9582f4b3e04fb8f0adf82a600aa45e83fd9c027a18db9def20a8a21902f510919b4d49dd81da23c7119f0ec3e6a4ddb00115c
- SSDEEP 6144:vKr8x3dwqsNy5ibpNjl4EqxF6snji81RUinKICr:yrcdQxl
- TLSH T19C34C7A77B709888F41815745CF3D3F23796EC4C4A4B42072A243E2A7FBBE652D25A53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2