General
- Target 税務公式関連書類.exe.zip
- Size 24.0MB
- Sample260909-k4sc3abf95
- SHA256 4bcbe86d8c692cb9ea09498502305dbf8a401a399490e93e20bef6614fa8a54e
- MD5 af939b06950676210f9b96be6579e18d
- SHA1 60aa3601b911af6152d3d35b22aa3ec1428a3f06
- SHA512 c4bd66cc7f16313fe6c421994396c1ba94683ff162bf027873c2d4f8fb230b0a75eb846a051f721e1246de38ea7f0443ae3328b2bd5254a4fb62ce16c2538b1e
- SSDEEP 393216:ua7nz4hH17024L4+qnhdORPP/PG/c9M8esY9jhTC3GUgY04RzWBeMt+pweXbS5+i:jrzOZ0/Yham/aM8q/UgdeMYpweXmZQ2J
- TLSH T16C4733F8A9F82BD26D97CE14C8F75828B6CC8B5C4F4B4E9A9591092FA611473FCD0427
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
税務公式関連書類.exe
Resource
win10v2004-20260513-ja
15 signatures
600 seconds
Behavioral task
behavioral2
Sample
税務公式関連書類.exe
Resource
win11ltsc2024-20260709-ja
14 signatures
600 seconds
Malware Config
Targets
-
- Target 税務公式関連書類.exe
- Size 24.4MB
- SHA256 39343a0900616b0aef2f47d40a85e659832369cb5e4f574e4cad14dea87d9d2d
- MD5 011f3c512b4de2457524291ac7e8fa44
- SHA1 d0e4745cd8047c0ff7d1ad0896304c95020dab85
- SHA512 a800250580804d11a1aaf23a40b6b7d2d33cc85ffebcdf4bb4d5edf296c83dded9dee180a618cbde59423e4b2eaf2b05f43035f767b242e4b7b0a3c7a5b7880d
- SSDEEP 786432:EDGN5SGd6k3zCnfp9F/wRu+JMT+q14FtBggb4tmqbQNdE/EBfE/:bNDd6cWp9F4Ru1jiFM+4X/Ey
- TLSH T1BF47332670918138D22357B0BE5DDF74606FF62E8F2A448F7787D92D29349D2E434A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
1