General
- Target bfccd187fb8fd58acbc9bd028763ed4d48b4f1856cc32e1bcb3e159b97e72e89
- Size 140KB
- Sample260826-za4asstsaw
- SHA256 bfccd187fb8fd58acbc9bd028763ed4d48b4f1856cc32e1bcb3e159b97e72e89
- MD5 d73fb4afff057f170fc15b710e9cbcc6
- SHA1 46e1c736fceaec1f7f73ed1883f16ceed2853262
- SHA512 5ed4d4124a0316c43f234f80ff254b84cd2738a7eb02c46ee6a0a6402c468767e34990a772373e4b674cb0c6f001e409116fff91366c1969c6df1a975e70ae16
- SSDEEP 3072:QB+zclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWO3:QBmAY5uXq0cu3XMO4nZLJPot60ohKdlL
- TLSH T1F4E39416BA54A07FE545E9F22529C35A78192F7B13B0BC43B385AB29B6700C3B4F075B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bfccd187fb8fd58acbc9bd028763ed4d48b4f1856cc32e1bcb3e159b97e72e89.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target bfccd187fb8fd58acbc9bd028763ed4d48b4f1856cc32e1bcb3e159b97e72e89
- Size 140KB
- SHA256 bfccd187fb8fd58acbc9bd028763ed4d48b4f1856cc32e1bcb3e159b97e72e89
- MD5 d73fb4afff057f170fc15b710e9cbcc6
- SHA1 46e1c736fceaec1f7f73ed1883f16ceed2853262
- SHA512 5ed4d4124a0316c43f234f80ff254b84cd2738a7eb02c46ee6a0a6402c468767e34990a772373e4b674cb0c6f001e409116fff91366c1969c6df1a975e70ae16
- SSDEEP 3072:QB+zclSAY5uXq0cu3XMO4nZLJY0PoeU60ohKdlLWO3:QBmAY5uXq0cu3XMO4nZLJPot60ohKdlL
- TLSH T1F4E39416BA54A07FE545E9F22529C35A78192F7B13B0BC43B385AB29B6700C3B4F075B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2