General
- Target 58cb307a18aee1b3176170214ff78a6f6325c2aa507fe9a218de04f45163d96c
- Size 5.1MB
- Sample260910-x468favdma
- SHA256 58cb307a18aee1b3176170214ff78a6f6325c2aa507fe9a218de04f45163d96c
- MD5 92a30f96fe2ebb69ca23ddbb3fecb617
- SHA1 0366a99b1371cf27cf75b0ec05cbf9a80a398f67
- SHA512 59a32bb15c03799f3b175c7bb093d9d3c83c16702e2a316fadb4dcedda0fa882386b27e01e47b6bbaa7234a498353a752bdddbb0b505d97aa363b529f829b7aa
- SSDEEP 49152:04xat1ToBHcOwimtZHt4xat1ToBHcOwimtZHt4xat1ToBHcOwimtZHt4xat1ToBe:0ytYnNytYnNytYnNytYn
- TLSH T14946F116F6F14437D1236EB8DC1F536CA8267E502D34648A3BE82D48AF39781753B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
58cb307a18aee1b3176170214ff78a6f6325c2aa507fe9a218de04f45163d96c.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 58cb307a18aee1b3176170214ff78a6f6325c2aa507fe9a218de04f45163d96c
- Size 5.1MB
- SHA256 58cb307a18aee1b3176170214ff78a6f6325c2aa507fe9a218de04f45163d96c
- MD5 92a30f96fe2ebb69ca23ddbb3fecb617
- SHA1 0366a99b1371cf27cf75b0ec05cbf9a80a398f67
- SHA512 59a32bb15c03799f3b175c7bb093d9d3c83c16702e2a316fadb4dcedda0fa882386b27e01e47b6bbaa7234a498353a752bdddbb0b505d97aa363b529f829b7aa
- SSDEEP 49152:04xat1ToBHcOwimtZHt4xat1ToBHcOwimtZHt4xat1ToBHcOwimtZHt4xat1ToBe:0ytYnNytYnNytYnNytYn
- TLSH T14946F116F6F14437D1236EB8DC1F536CA8267E502D34648A3BE82D48AF39781753B29B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1