General
- Target 67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae
- Size 876KB
- Sample260908-krvmnaec94
- SHA256 67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae
- MD5 818f78339c967bccf80e9edb8dd0ad6a
- SHA1 165785f1039125b1275badfd27375bcefd7d90b2
- SHA512 38f4552ec8dfbfeea045d0a03d3d5bd23d82d2995bc291af74e34e225544c316ed7ea247bd24dfa9b66a90cdfa13234f5e8f13d48fe0ab4bb85610696173e6a0
- SSDEEP 24576:LGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErDpGvrY3tcr1R2ydMQULhbeeE7xV:LLN+GE3pLN+GE3t
- TLSH T153159E22F291C4B2D036297D8C1BA3A869997E913D196C463AF83D4D5F3D3D0392B397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae
- Size 876KB
- SHA256 67157f63006fcaa43327e65465fa1eca7007fc2e982d256269a3d917011f13ae
- MD5 818f78339c967bccf80e9edb8dd0ad6a
- SHA1 165785f1039125b1275badfd27375bcefd7d90b2
- SHA512 38f4552ec8dfbfeea045d0a03d3d5bd23d82d2995bc291af74e34e225544c316ed7ea247bd24dfa9b66a90cdfa13234f5e8f13d48fe0ab4bb85610696173e6a0
- SSDEEP 24576:LGvrY3tcr1R2ydMQULhbeeE7xoD46mJvC0wErDpGvrY3tcr1R2ydMQULhbeeE7xV:LLN+GE3pLN+GE3t
- TLSH T153159E22F291C4B2D036297D8C1BA3A869997E913D196C463AF83D4D5F3D3D0392B397
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of file extensions in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2