General
- Target 0dfc3476345352b7ba98e110a562a79eade36abb3ec32e88954c94876fe9e0b6
- Size 656KB
- Sample260912-1tvnfaaf84
- SHA256 0dfc3476345352b7ba98e110a562a79eade36abb3ec32e88954c94876fe9e0b6
- MD5 c34a2b0ba8407b3ba21733c4c05aef4a
- SHA1 b0c5dadffaf28a62e9d5f8d8110a1b4b8ec03995
- SHA512 b84d79eac5cc33b709db95fd820ee1544f806e5fc2da83889c7285b3a75c89344536188534bd85b291c2d9b71b33f8d8d98a6ef1390c9b6059566a3d86c9a603
- SSDEEP 12288:nRJb7vg+t9FP4mRtj9ie0cJ5FVRAPHGA9apwS77XEo2sBvCX:nRpLVFPbthieraHDowhxsBQ
- TLSH T132E49F31F6D18837E1731E789C4B81A99925BF502D2874477FED0E4C8F396A23E291E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0dfc3476345352b7ba98e110a562a79eade36abb3ec32e88954c94876fe9e0b6.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target 0dfc3476345352b7ba98e110a562a79eade36abb3ec32e88954c94876fe9e0b6
- Size 656KB
- SHA256 0dfc3476345352b7ba98e110a562a79eade36abb3ec32e88954c94876fe9e0b6
- MD5 c34a2b0ba8407b3ba21733c4c05aef4a
- SHA1 b0c5dadffaf28a62e9d5f8d8110a1b4b8ec03995
- SHA512 b84d79eac5cc33b709db95fd820ee1544f806e5fc2da83889c7285b3a75c89344536188534bd85b291c2d9b71b33f8d8d98a6ef1390c9b6059566a3d86c9a603
- SSDEEP 12288:nRJb7vg+t9FP4mRtj9ie0cJ5FVRAPHGA9apwS77XEo2sBvCX:nRpLVFPbthieraHDowhxsBQ
- TLSH T132E49F31F6D18837E1731E789C4B81A99925BF502D2874477FED0E4C8F396A23E291E6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1