General
- Target 7b92f73f8143e0f4472552160fee265d3a02cd8201fbd7a10e79972bb881265a
- Size 120KB
- Sample260827-rdc9saaj6t
- SHA256 7b92f73f8143e0f4472552160fee265d3a02cd8201fbd7a10e79972bb881265a
- MD5 ca20c57d0ab5ae365954c1d907fb5d8f
- SHA1 4804e5d7971fd3980c7c3f4298d0dbb2225c4d70
- SHA512 59840bc9bbe81bbc3638b0f0fd9250347549dc0c4ee1d0a26ad5630b890ba15122c0f75ba706c4dc2f2581ba0bbbb9157fd610d0a2ae5a83eb1401579f86a03a
- SSDEEP 1536:xGHjWQ9AIAgd1/FXWG6izZNP6RQ3mncbvbj3a2HCBjsXLl/Gfx8XNf0OC:xGDrpd1/l0izZF6yCenK2iGlefx8X12
- TLSH T102C3B42673D0F27AC529C7F43D1A83E0802EAD742196AD03FBC55F2A76B1E979224747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7b92f73f8143e0f4472552160fee265d3a02cd8201fbd7a10e79972bb881265a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 7b92f73f8143e0f4472552160fee265d3a02cd8201fbd7a10e79972bb881265a
- Size 120KB
- SHA256 7b92f73f8143e0f4472552160fee265d3a02cd8201fbd7a10e79972bb881265a
- MD5 ca20c57d0ab5ae365954c1d907fb5d8f
- SHA1 4804e5d7971fd3980c7c3f4298d0dbb2225c4d70
- SHA512 59840bc9bbe81bbc3638b0f0fd9250347549dc0c4ee1d0a26ad5630b890ba15122c0f75ba706c4dc2f2581ba0bbbb9157fd610d0a2ae5a83eb1401579f86a03a
- SSDEEP 1536:xGHjWQ9AIAgd1/FXWG6izZNP6RQ3mncbvbj3a2HCBjsXLl/Gfx8XNf0OC:xGDrpd1/l0izZF6yCenK2iGlefx8X12
- TLSH T102C3B42673D0F27AC529C7F43D1A83E0802EAD742196AD03FBC55F2A76B1E979224747
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2