General
- Target 1df55b42437dc239de5989db8e62693f0dd3eb9ad51e0508b4fe530c18ea2024
- Size 5.1MB
- Sample260910-klaejattgw
- SHA256 1df55b42437dc239de5989db8e62693f0dd3eb9ad51e0508b4fe530c18ea2024
- MD5 7cdb99e21fc944c099bbd46339d37bba
- SHA1 03fcad215cff020dfc7d3d6b264960f3a3f2e346
- SHA512 7b81859ff9c70ff2b5a173bc9d15130152f01fdf5fc51eeff55c654bbe0d39103c9b69df55e36b923df5c0c3147d4ac05d13ca7e00415799e20ae37358ea4dd6
- SSDEEP 49152:04xat1boBHcOwimtZHt4xat1boBHcOwimtZHt4xat1boBHcOwimtZHt4xat1boBe:0yNYnNyNYnNyNYnNyNYn
- TLSH T17746F116F6F14437D1236EB8DC1F536CA8267E502D34648A3BE82D48AF39781753B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1df55b42437dc239de5989db8e62693f0dd3eb9ad51e0508b4fe530c18ea2024.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 1df55b42437dc239de5989db8e62693f0dd3eb9ad51e0508b4fe530c18ea2024
- Size 5.1MB
- SHA256 1df55b42437dc239de5989db8e62693f0dd3eb9ad51e0508b4fe530c18ea2024
- MD5 7cdb99e21fc944c099bbd46339d37bba
- SHA1 03fcad215cff020dfc7d3d6b264960f3a3f2e346
- SHA512 7b81859ff9c70ff2b5a173bc9d15130152f01fdf5fc51eeff55c654bbe0d39103c9b69df55e36b923df5c0c3147d4ac05d13ca7e00415799e20ae37358ea4dd6
- SSDEEP 49152:04xat1boBHcOwimtZHt4xat1boBHcOwimtZHt4xat1boBHcOwimtZHt4xat1boBe:0yNYnNyNYnNyNYnNyNYn
- TLSH T17746F116F6F14437D1236EB8DC1F536CA8267E502D34648A3BE82D48AF39781753B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1