General
- Target 0956ede8ba1523b3c8dc48f352739f836458bacd96079e285cedbdb5a1d31d5c
- Size 80KB
- Sample260826-rzbcba1bkh
- SHA256 0956ede8ba1523b3c8dc48f352739f836458bacd96079e285cedbdb5a1d31d5c
- MD5 bb96391b98579f0d39bc3fbb7572f494
- SHA1 47fc4e1f9630f5870fa0d1c18e3be116a10bde81
- SHA512 0dfa2bcbdfee164886d7ba3e849185122e9e6baf1eded24d14afe72f86a229a2786984b0f7a7e214b7971f0bac311cfee8d3b868f741a1995d834060cb72061c
- SSDEEP 1536:Wxw9KSj4i7GPetn9lvwDkJY7v5QdGV4lK:G5slvwDkJEaGOK
- TLSH T19783D66A3A09D096D018AE3476F7C7F615BB3C577F4B520BAB04767D0CA6F200D68A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0956ede8ba1523b3c8dc48f352739f836458bacd96079e285cedbdb5a1d31d5c.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0956ede8ba1523b3c8dc48f352739f836458bacd96079e285cedbdb5a1d31d5c
- Size 80KB
- SHA256 0956ede8ba1523b3c8dc48f352739f836458bacd96079e285cedbdb5a1d31d5c
- MD5 bb96391b98579f0d39bc3fbb7572f494
- SHA1 47fc4e1f9630f5870fa0d1c18e3be116a10bde81
- SHA512 0dfa2bcbdfee164886d7ba3e849185122e9e6baf1eded24d14afe72f86a229a2786984b0f7a7e214b7971f0bac311cfee8d3b868f741a1995d834060cb72061c
- SSDEEP 1536:Wxw9KSj4i7GPetn9lvwDkJY7v5QdGV4lK:G5slvwDkJEaGOK
- TLSH T19783D66A3A09D096D018AE3476F7C7F615BB3C577F4B520BAB04767D0CA6F200D68A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2