General
- Target 1ba64597ca1716e9b63b1f38295e33b1649963583d962cc179e80c9ac218aed8
- Size 1.9MB
- Sample260910-j6aqcsgb72
- SHA256 1ba64597ca1716e9b63b1f38295e33b1649963583d962cc179e80c9ac218aed8
- MD5 8cbeb5814dd08dfeac6cda8ca9e3487c
- SHA1 0ca4723a93f4ab87cdac20f5b04155e9490f85be
- SHA512 41c49df358f24dc61519554d196b6f0c474c01e7dcaf8a5469655da8984574d67ceeeef788c76f25a64a9def3858ce2042dcb848afdbc60ab4fd3a9c81800e55
- SSDEEP 24576:svxvhZec20QPzKhfAuqDoSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:IxvGOYfoSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T173955C0273F9412AF1F36B30DAB952645AF7BD79AD3AC10F1289124E1DB4A609D72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ba64597ca1716e9b63b1f38295e33b1649963583d962cc179e80c9ac218aed8.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1ba64597ca1716e9b63b1f38295e33b1649963583d962cc179e80c9ac218aed8
- Size 1.9MB
- SHA256 1ba64597ca1716e9b63b1f38295e33b1649963583d962cc179e80c9ac218aed8
- MD5 8cbeb5814dd08dfeac6cda8ca9e3487c
- SHA1 0ca4723a93f4ab87cdac20f5b04155e9490f85be
- SHA512 41c49df358f24dc61519554d196b6f0c474c01e7dcaf8a5469655da8984574d67ceeeef788c76f25a64a9def3858ce2042dcb848afdbc60ab4fd3a9c81800e55
- SSDEEP 24576:svxvhZec20QPzKhfAuqDoSgouvz0ZRHkFfenxyQZXS7gZnQh2NIq:IxvGOYfoSgouvAeFfenxyQZXS7uQ0NIq
- TLSH T173955C0273F9412AF1F36B30DAB952645AF7BD79AD3AC10F1289124E1DB4A609D72733
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1