General
- Target 87ca1e5baf65d8bc0c5ab39c174b57c3db47b4ee05fe48c4361263fdd442ac52
- Size 320KB
- Sample260827-kpbf1az1es
- SHA256 87ca1e5baf65d8bc0c5ab39c174b57c3db47b4ee05fe48c4361263fdd442ac52
- MD5 fd8e2076a40a5521992d713c2b7cc13c
- SHA1 e5a810ceb089acbc348cc5096d9a7a0d7f8a0b30
- SHA512 db45b883ad1e42f8af085b8a8529e1e8d055413109c0763f2622ca9092b2a7e6406e23ff69afb4f434fbd109774b968c88d2b2ac4db61b1d9081694dad3eb6a1
- SSDEEP 6144:tD+xPxlVG8izJ66onJGr+qyVztumGS5Ni3hpgoMKMphaeVf2B71ug:tMPjVG8iH6JGr+qyVztumGS5YqoyU71n
- TLSH T1A064A525AB14603BE11685F2287E936A281C5E7613D0EC17F380BB88B4752E7B5F176F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
87ca1e5baf65d8bc0c5ab39c174b57c3db47b4ee05fe48c4361263fdd442ac52.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 87ca1e5baf65d8bc0c5ab39c174b57c3db47b4ee05fe48c4361263fdd442ac52
- Size 320KB
- SHA256 87ca1e5baf65d8bc0c5ab39c174b57c3db47b4ee05fe48c4361263fdd442ac52
- MD5 fd8e2076a40a5521992d713c2b7cc13c
- SHA1 e5a810ceb089acbc348cc5096d9a7a0d7f8a0b30
- SHA512 db45b883ad1e42f8af085b8a8529e1e8d055413109c0763f2622ca9092b2a7e6406e23ff69afb4f434fbd109774b968c88d2b2ac4db61b1d9081694dad3eb6a1
- SSDEEP 6144:tD+xPxlVG8izJ66onJGr+qyVztumGS5Ni3hpgoMKMphaeVf2B71ug:tMPjVG8iH6JGr+qyVztumGS5YqoyU71n
- TLSH T1A064A525AB14603BE11685F2287E936A281C5E7613D0EC17F380BB88B4752E7B5F176F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2