General
- Target 77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0
- Size 32KB
- Sample260826-yeeybsfa74
- SHA256 77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0
- MD5 dfb196b722f13d82b319cdc3e96babf3
- SHA1 85f2c2c4d39524021d9a2bb27c16948f44e7c4a8
- SHA512 9ec99231f17b8e93706aaff318759cc724ffbfde7cfa81916454a4710e32e67e2608b6d531283308b17f308b167ee9ff3880b55a40f02cf37248d3f1019f8a49
- SSDEEP 768:k7XtgD2BA5a7Er2z65I1sAwkbs4q1vgMQ+:k7mLYE6mkbFq5gMQ+
- TLSH T1C1E2290473E49625E2FE4EBD593285044336F6475E23D79E2FD8A09F1623BC88E61BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0.exe
Resource
win10v2004-20260513-en
10 signatures
60 seconds
Behavioral task
behavioral2
Sample
77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0.exe
Resource
win11ltsc2024-20260709-en
4 signatures
60 seconds
Malware Config
Targets
-
- Target 77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0
- Size 32KB
- SHA256 77b864752e88e4031c9801cff0eb0d433a9459747862c77fd23b51966a729fa0
- MD5 dfb196b722f13d82b319cdc3e96babf3
- SHA1 85f2c2c4d39524021d9a2bb27c16948f44e7c4a8
- SHA512 9ec99231f17b8e93706aaff318759cc724ffbfde7cfa81916454a4710e32e67e2608b6d531283308b17f308b167ee9ff3880b55a40f02cf37248d3f1019f8a49
- SSDEEP 768:k7XtgD2BA5a7Er2z65I1sAwkbs4q1vgMQ+:k7mLYE6mkbFq5gMQ+
- TLSH T1C1E2290473E49625E2FE4EBD593285044336F6475E23D79E2FD8A09F1623BC88E61BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1