General
- Target 96ea9addcc51f0f8ec01b94b2923ef46fb8f4c9ee701e37ccf01847329e56214
- Size 140KB
- Sample260831-lefhmsgl6t
- SHA256 96ea9addcc51f0f8ec01b94b2923ef46fb8f4c9ee701e37ccf01847329e56214
- MD5 512ea2d013953966e93f944021002b82
- SHA1 483c90df2fc2d918e7e017ded7284fccab7ccd2f
- SHA512 f4807eb7887c75c12d20c5cccaeee47c594aa286dbe7898dc28333f40cb4e196df357ae9fc087906c7be01249b9a31ac558e614b25bcd3033734956a68d6e1d6
- SSDEEP 768:zv0ADyt4pd04q0zik+vhy7g0EM/LinbQe:7BeEn3+pCg0EUGQe
- TLSH T10BE3525FB3466698DE7950F426CD63D62DE2C5FC8623C291DB74A089F92CE2F0D0099B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
96ea9addcc51f0f8ec01b94b2923ef46fb8f4c9ee701e37ccf01847329e56214.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 96ea9addcc51f0f8ec01b94b2923ef46fb8f4c9ee701e37ccf01847329e56214
- Size 140KB
- SHA256 96ea9addcc51f0f8ec01b94b2923ef46fb8f4c9ee701e37ccf01847329e56214
- MD5 512ea2d013953966e93f944021002b82
- SHA1 483c90df2fc2d918e7e017ded7284fccab7ccd2f
- SHA512 f4807eb7887c75c12d20c5cccaeee47c594aa286dbe7898dc28333f40cb4e196df357ae9fc087906c7be01249b9a31ac558e614b25bcd3033734956a68d6e1d6
- SSDEEP 768:zv0ADyt4pd04q0zik+vhy7g0EM/LinbQe:7BeEn3+pCg0EUGQe
- TLSH T10BE3525FB3466698DE7950F426CD63D62DE2C5FC8623C291DB74A089F92CE2F0D0099B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2