General
- Target efbb3a6f1232ef7105ae1412b2f934928d843a10dcdef020b0c9d3bd190ceaaf
- Size 136KB
- Sample260827-va1sfsad76
- SHA256 efbb3a6f1232ef7105ae1412b2f934928d843a10dcdef020b0c9d3bd190ceaaf
- MD5 502c00bdef6fd1cbd5e01cbc2b7efe39
- SHA1 8aaf0db52030e2165f56f52db9148c3aa2a9de14
- SHA512 a6232b2ad155e8cd666e2f002041cc7c55580d9514c2747246784af67156087377084f34e15f30478e5fbe789474172b370a74b1208b59e7e1fa99290488d54c
- SSDEEP 3072:BmIVvwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmh:BmvQn7WbIqH0ybZBiOllyE5D+aVkjseN
- TLSH T1B7D37217B664503FD155D8F57A29C25A30292F7A13A0BC83B7C0AB19AEB01E3B5F570B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
efbb3a6f1232ef7105ae1412b2f934928d843a10dcdef020b0c9d3bd190ceaaf.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target efbb3a6f1232ef7105ae1412b2f934928d843a10dcdef020b0c9d3bd190ceaaf
- Size 136KB
- SHA256 efbb3a6f1232ef7105ae1412b2f934928d843a10dcdef020b0c9d3bd190ceaaf
- MD5 502c00bdef6fd1cbd5e01cbc2b7efe39
- SHA1 8aaf0db52030e2165f56f52db9148c3aa2a9de14
- SHA512 a6232b2ad155e8cd666e2f002041cc7c55580d9514c2747246784af67156087377084f34e15f30478e5fbe789474172b370a74b1208b59e7e1fa99290488d54c
- SSDEEP 3072:BmIVvwjBfQn7WbIqH0ybZBiOllyEmcP82+aVdOt66VGegmh:BmvQn7WbIqH0ybZBiOllyE5D+aVkjseN
- TLSH T1B7D37217B664503FD155D8F57A29C25A30292F7A13A0BC83B7C0AB19AEB01E3B5F570B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2