General
- Target 249146c9fad1d9016f9718dd827260971d0bfe9f1002475a5e593f3873cc6a53
- Size 124KB
- Sample260830-1jpdns1ajb
- SHA256 249146c9fad1d9016f9718dd827260971d0bfe9f1002475a5e593f3873cc6a53
- MD5 d5ffcc80affd3e16753c75262ce8c64c
- SHA1 483a52fab016e126f3bf7e5bcd72d851492eecd1
- SHA512 16fdad46aafd6c1a4065acf95249089f14e45a6671b83f48a172dad593f217c8c4d34e405f76cf312dd778133107c9819783439cb1da9efdfecd9c7946e65266
- SSDEEP 1536:mBsz/5YaivYhRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:kGBYaMYhkFoN3Oo1+FvfSW
- TLSH T1D3C3EDAAFB82107DF156017C16DAE6E337A67805DD6BD08AB734B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
249146c9fad1d9016f9718dd827260971d0bfe9f1002475a5e593f3873cc6a53.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 249146c9fad1d9016f9718dd827260971d0bfe9f1002475a5e593f3873cc6a53
- Size 124KB
- SHA256 249146c9fad1d9016f9718dd827260971d0bfe9f1002475a5e593f3873cc6a53
- MD5 d5ffcc80affd3e16753c75262ce8c64c
- SHA1 483a52fab016e126f3bf7e5bcd72d851492eecd1
- SHA512 16fdad46aafd6c1a4065acf95249089f14e45a6671b83f48a172dad593f217c8c4d34e405f76cf312dd778133107c9819783439cb1da9efdfecd9c7946e65266
- SSDEEP 1536:mBsz/5YaivYhRO/N69BH3OoGa+FLHjKceRgrkOSoINeGUmE:kGBYaMYhkFoN3Oo1+FvfSW
- TLSH T1D3C3EDAAFB82107DF156017C16DAE6E337A67805DD6BD08AB734B2A40CDAD1108FD763
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2