General
- Target f55269b49a89b52dd05135231b2409178a2edfe53286d14dc288da5ca90e158e
- Size 124KB
- Sample260826-mqvblsck2v
- SHA256 f55269b49a89b52dd05135231b2409178a2edfe53286d14dc288da5ca90e158e
- MD5 caadae9b5739cca6a900066e23d90927
- SHA1 47e0cb4e095e8bf660c6f8ab680206cae5c189aa
- SHA512 f59b3af24d812338e85c1b31886a18bf0fff84f551001e85cab1a80f0dda9197ccf677a353dce396c6253d3a7c1f2cced4a316864c39f4ff8065c0d21a3c0308
- SSDEEP 1536:Adszo5YI/HhRO/N69BH3OoGa+FLHjKKvRgrkOSoINeG0h/E:6GaYIHhkFoN3Oo1+FvkS8M
- TLSH T148C3FCAAFB82107DF156017C16DAE6E337A57805DD6BD08ABB34B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f55269b49a89b52dd05135231b2409178a2edfe53286d14dc288da5ca90e158e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f55269b49a89b52dd05135231b2409178a2edfe53286d14dc288da5ca90e158e
- Size 124KB
- SHA256 f55269b49a89b52dd05135231b2409178a2edfe53286d14dc288da5ca90e158e
- MD5 caadae9b5739cca6a900066e23d90927
- SHA1 47e0cb4e095e8bf660c6f8ab680206cae5c189aa
- SHA512 f59b3af24d812338e85c1b31886a18bf0fff84f551001e85cab1a80f0dda9197ccf677a353dce396c6253d3a7c1f2cced4a316864c39f4ff8065c0d21a3c0308
- SSDEEP 1536:Adszo5YI/HhRO/N69BH3OoGa+FLHjKKvRgrkOSoINeG0h/E:6GaYIHhkFoN3Oo1+FvkS8M
- TLSH T148C3FCAAFB82107DF156017C16DAE6E337A57805DD6BD08ABB34B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2