Overview

overview

7

Static

static

3

splwow64.exe

windows10-2004-x64

7

splwow64.exe

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    splwow64.exe
  • Size 111KB
  • Sample260906-yfp5pay1ds
  • SHA256 0a8211806999ec0c57cabc1ef48df7c9ec926839193f5ac5b4ec51f4e4157497
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasionexecutionpersistence

Malware Config

Targets

    • Target
      splwow64.exe
    • Size 111KB
    • SHA256 0a8211806999ec0c57cabc1ef48df7c9ec926839193f5ac5b4ec51f4e4157497
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasionexecutionpersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks