General
- Target 7fe918464b616357bab2086d61933b0d53873f8f11ef2260ab0b1015d283b93b
- Size 120KB
- Sample260825-srpemsvbjb
- SHA256 7fe918464b616357bab2086d61933b0d53873f8f11ef2260ab0b1015d283b93b
- MD5 bc010953301c4043cadadec2f028a7c4
- SHA1 47e5342ed30171bb1b44a6c17d004b233d1f0dfd
- SHA512 e3f400bf3301da3b07e7392f1cfbad896fccc3af0c2416ce4b2c925ccf96a3a5e042d1c4e7afbafe80e9a9b36adfa2f75eb8682756b7e80c77baffb63c0353c7
- SSDEEP 1536:xGT2ALAIAgd1/FXWG6izZNP6RQ3mncbvbj3a2HCBjsXLl/Gfx8XNf0OH:xGdNpd1/l0izZF6yCenK2iGlefx8X17
- TLSH T1BCC3B4267391F23AC529C7F43D1A83E1802DAD742196AD03FBC51F2AB6F1E979224747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7fe918464b616357bab2086d61933b0d53873f8f11ef2260ab0b1015d283b93b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 7fe918464b616357bab2086d61933b0d53873f8f11ef2260ab0b1015d283b93b
- Size 120KB
- SHA256 7fe918464b616357bab2086d61933b0d53873f8f11ef2260ab0b1015d283b93b
- MD5 bc010953301c4043cadadec2f028a7c4
- SHA1 47e5342ed30171bb1b44a6c17d004b233d1f0dfd
- SHA512 e3f400bf3301da3b07e7392f1cfbad896fccc3af0c2416ce4b2c925ccf96a3a5e042d1c4e7afbafe80e9a9b36adfa2f75eb8682756b7e80c77baffb63c0353c7
- SSDEEP 1536:xGT2ALAIAgd1/FXWG6izZNP6RQ3mncbvbj3a2HCBjsXLl/Gfx8XNf0OH:xGdNpd1/l0izZF6yCenK2iGlefx8X17
- TLSH T1BCC3B4267391F23AC529C7F43D1A83E1802DAD742196AD03FBC51F2AB6F1E979224747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2