General
- Target 4230cf2a041f510d9bb1080f053a4cd24fb6d65d825717781bbd7f1d0b0ca56d
- Size 7.4MB
- Sample260910-ssk4ls1gme
- SHA256 4230cf2a041f510d9bb1080f053a4cd24fb6d65d825717781bbd7f1d0b0ca56d
- MD5 e6bc92b26f01b5575a951304e4d895c4
- SHA1 da3ce86e34cd747e007a685b928968dc61331e0b
- SHA512 4e5fae9f0c988374e113c726ef11b1879d5d5bea5420b9a41f9bbfdd172b181dc8f8149ae7c70320f4d0c111b59363ba168ce8cdf96395b6c81471f72a4f6aa5
- SSDEEP 49152:04xat1foBHcOwimtZHt4xat1foBHcOwimtZHt4xat1foBHcOwimtZHt4xat1foBY:0yFYnNyFYnNyFYnNyFYnNyFYnNyFYF
- TLSH T1F876F116F6F14437D1236EB8DC1F576CA8267E602D3464863BE82D48AF39781743B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4230cf2a041f510d9bb1080f053a4cd24fb6d65d825717781bbd7f1d0b0ca56d.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 4230cf2a041f510d9bb1080f053a4cd24fb6d65d825717781bbd7f1d0b0ca56d
- Size 7.4MB
- SHA256 4230cf2a041f510d9bb1080f053a4cd24fb6d65d825717781bbd7f1d0b0ca56d
- MD5 e6bc92b26f01b5575a951304e4d895c4
- SHA1 da3ce86e34cd747e007a685b928968dc61331e0b
- SHA512 4e5fae9f0c988374e113c726ef11b1879d5d5bea5420b9a41f9bbfdd172b181dc8f8149ae7c70320f4d0c111b59363ba168ce8cdf96395b6c81471f72a4f6aa5
- SSDEEP 49152:04xat1foBHcOwimtZHt4xat1foBHcOwimtZHt4xat1foBHcOwimtZHt4xat1foBY:0yFYnNyFYnNyFYnNyFYnNyFYnNyFYF
- TLSH T1F876F116F6F14437D1236EB8DC1F576CA8267E602D3464863BE82D48AF39781743B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1