General
- Target b52b0c06f6cd2dee9c48440f1510404c3461f6f01e65bb9483a67c8199d7d014
- Size 124KB
- Sample260828-h3pjnstyfv
- SHA256 b52b0c06f6cd2dee9c48440f1510404c3461f6f01e65bb9483a67c8199d7d014
- MD5 d03a6848411aca2891653e9e340be73b
- SHA1 48151f1b557a13cdb93eed714ef7b157f678d27f
- SHA512 43bc838cef97864150a2b87171de0a681d31072f5122fd11dd85596715cfd407d67e47dd2c05e8ce725f26f1d0c801bbec396af0d5e1f69341b928dc990f06a1
- SSDEEP 1536:/Jsz25YThRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:hGUYThkFoN3Oo1+FvfSW
- TLSH T133C3FCAAFB82107DF156017C16DAE6E337A57805DD6BD08ABB34B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b52b0c06f6cd2dee9c48440f1510404c3461f6f01e65bb9483a67c8199d7d014.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b52b0c06f6cd2dee9c48440f1510404c3461f6f01e65bb9483a67c8199d7d014
- Size 124KB
- SHA256 b52b0c06f6cd2dee9c48440f1510404c3461f6f01e65bb9483a67c8199d7d014
- MD5 d03a6848411aca2891653e9e340be73b
- SHA1 48151f1b557a13cdb93eed714ef7b157f678d27f
- SHA512 43bc838cef97864150a2b87171de0a681d31072f5122fd11dd85596715cfd407d67e47dd2c05e8ce725f26f1d0c801bbec396af0d5e1f69341b928dc990f06a1
- SSDEEP 1536:/Jsz25YThRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:hGUYThkFoN3Oo1+FvfSW
- TLSH T133C3FCAAFB82107DF156017C16DAE6E337A57805DD6BD08ABB34B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2