General
- Target 8ed13caadd2ac0982bdc12124d91dc91454f9903ad95012c0f14de8e014a4998
- Size 116KB
- Sample260826-kwxmtace45
- SHA256 8ed13caadd2ac0982bdc12124d91dc91454f9903ad95012c0f14de8e014a4998
- MD5 f2f670e4ff96dd14ed59111e0b36ff8c
- SHA1 47e67606e346eb0c14a6247f79d567ef0430ebe8
- SHA512 8c5414d0fe3da0ef440dd7c0c0ed83ecd42e4114073514de551c684422c4db5d21a3a048defc84dd47378d194c60f259b6d7ea7ce3f3fddcb41d96ec6bf79e45
- SSDEEP 1536:QDxB/+Ax8Kw6KBOcW4Z8HO1Zwt0f4HfDUEdMOPy9sbgNRwo7JaSi:qmAxfcr1ZoDUEdgwQU
- TLSH T176C3619B7F362045F55415302EF382F337E5E88E1A57610BAB2426291FEBE361C64B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ed13caadd2ac0982bdc12124d91dc91454f9903ad95012c0f14de8e014a4998.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 8ed13caadd2ac0982bdc12124d91dc91454f9903ad95012c0f14de8e014a4998
- Size 116KB
- SHA256 8ed13caadd2ac0982bdc12124d91dc91454f9903ad95012c0f14de8e014a4998
- MD5 f2f670e4ff96dd14ed59111e0b36ff8c
- SHA1 47e67606e346eb0c14a6247f79d567ef0430ebe8
- SHA512 8c5414d0fe3da0ef440dd7c0c0ed83ecd42e4114073514de551c684422c4db5d21a3a048defc84dd47378d194c60f259b6d7ea7ce3f3fddcb41d96ec6bf79e45
- SSDEEP 1536:QDxB/+Ax8Kw6KBOcW4Z8HO1Zwt0f4HfDUEdMOPy9sbgNRwo7JaSi:qmAxfcr1ZoDUEdgwQU
- TLSH T176C3619B7F362045F55415302EF382F337E5E88E1A57610BAB2426291FEBE361C64B63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2