General
- Target 3e1f7de2e235d8c5b9bdf30ee87bbe94549dd7d53f6390a890a7b4c0bc6f0a5f
- Size 176KB
- Sample260826-s9d2mayzh1
- SHA256 3e1f7de2e235d8c5b9bdf30ee87bbe94549dd7d53f6390a890a7b4c0bc6f0a5f
- MD5 63742efefd4602ea14a5d8285715c2b6
- SHA1 47f9ea9516fe21f0282bd943d433e791c328b8f5
- SHA512 b9a2a1db65c6ed6a8d0edc728376c94b2b87e3b815dff578509a14dd291907d04c4bf8c0232cfc3414e8c0fae039bd9eb847eba252d847c7bf665c2661699eb7
- SSDEEP 3072:MrCq1cO+4xLKGPQb6pLnq1AbpaMAePjT9273c0IGnXTzTon:CBxLKGPQbWqliF27MoHT
- TLSH T16304701972C0E239D425CAF8797983A0E83EFD3218E66D17E7D17B2876A0D579274323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3e1f7de2e235d8c5b9bdf30ee87bbe94549dd7d53f6390a890a7b4c0bc6f0a5f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 3e1f7de2e235d8c5b9bdf30ee87bbe94549dd7d53f6390a890a7b4c0bc6f0a5f
- Size 176KB
- SHA256 3e1f7de2e235d8c5b9bdf30ee87bbe94549dd7d53f6390a890a7b4c0bc6f0a5f
- MD5 63742efefd4602ea14a5d8285715c2b6
- SHA1 47f9ea9516fe21f0282bd943d433e791c328b8f5
- SHA512 b9a2a1db65c6ed6a8d0edc728376c94b2b87e3b815dff578509a14dd291907d04c4bf8c0232cfc3414e8c0fae039bd9eb847eba252d847c7bf665c2661699eb7
- SSDEEP 3072:MrCq1cO+4xLKGPQb6pLnq1AbpaMAePjT9273c0IGnXTzTon:CBxLKGPQbWqliF27MoHT
- TLSH T16304701972C0E239D425CAF8797983A0E83EFD3218E66D17E7D17B2876A0D579274323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2