General
- Target e984dad25616f1bfa3fb033bcca2a6c682f7824d689ddd76b9351915406a2050
- Size 60KB
- Sample260830-z9cbcsaj2s
- SHA256 e984dad25616f1bfa3fb033bcca2a6c682f7824d689ddd76b9351915406a2050
- MD5 b402691c45fe425390a7b97d502110c1
- SHA1 481d411f6ccd926e9e01957edc2b07f53600ea8b
- SHA512 6e28a7bcd55597bbdbe0eb769944eb1569d5cf215c8f4a7b8101def7e814d14378e21c35909394314fc5f48ad23969098f415fbf53cd0b17e645adb909503499
- SSDEEP 768:hQOy2HjrPr/5m/UMLmNoI/LJgKFIktcvFIkCd+D9eaLVNvYn6gQNyspK6D8Lx4j+:hWIThxeVnBvmiINMK9VmZxrUOjD5E+S
- TLSH T12953C56F7349186ADB08B2353267C7EB19D3B88A0B4F5A831BB4637D9C64F112C16B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e984dad25616f1bfa3fb033bcca2a6c682f7824d689ddd76b9351915406a2050.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e984dad25616f1bfa3fb033bcca2a6c682f7824d689ddd76b9351915406a2050
- Size 60KB
- SHA256 e984dad25616f1bfa3fb033bcca2a6c682f7824d689ddd76b9351915406a2050
- MD5 b402691c45fe425390a7b97d502110c1
- SHA1 481d411f6ccd926e9e01957edc2b07f53600ea8b
- SHA512 6e28a7bcd55597bbdbe0eb769944eb1569d5cf215c8f4a7b8101def7e814d14378e21c35909394314fc5f48ad23969098f415fbf53cd0b17e645adb909503499
- SSDEEP 768:hQOy2HjrPr/5m/UMLmNoI/LJgKFIktcvFIkCd+D9eaLVNvYn6gQNyspK6D8Lx4j+:hWIThxeVnBvmiINMK9VmZxrUOjD5E+S
- TLSH T12953C56F7349186ADB08B2353267C7EB19D3B88A0B4F5A831BB4637D9C64F112C16B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2