General
- Target 954ccf624d748154c53811d3a7c36a04510fb6953f46a6590773254a880e1e48
- Size 31KB
- Sample260912-ksb7pssfkd
- SHA256 954ccf624d748154c53811d3a7c36a04510fb6953f46a6590773254a880e1e48
- MD5 5ee00b43420555fe66b803cf5194e4ef
- SHA1 509536954915aaeb5922aaae421f7ff4e4a3baa5
- SHA512 b26a174065ea50189fd87d3267b6f9a5e2b0527df214b949093b0c26d65b743298837f103ce005446767c6ed3c37917b059888c2da988295a286f3b23689be47
- SSDEEP 768:+t5KLZ/vbDEj7RzveKKLHW6wVmuHXJHdzTC/Wc8HEzHvce:+t5SZbDEj7RDe/q6wVBpGpRTvce
- TLSH T134E2D62B7744182AD9697239725786DF22E361990F4B0B477A3033BEFC29E501C66F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
954ccf624d748154c53811d3a7c36a04510fb6953f46a6590773254a880e1e48.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 954ccf624d748154c53811d3a7c36a04510fb6953f46a6590773254a880e1e48
- Size 31KB
- SHA256 954ccf624d748154c53811d3a7c36a04510fb6953f46a6590773254a880e1e48
- MD5 5ee00b43420555fe66b803cf5194e4ef
- SHA1 509536954915aaeb5922aaae421f7ff4e4a3baa5
- SHA512 b26a174065ea50189fd87d3267b6f9a5e2b0527df214b949093b0c26d65b743298837f103ce005446767c6ed3c37917b059888c2da988295a286f3b23689be47
- SSDEEP 768:+t5KLZ/vbDEj7RzveKKLHW6wVmuHXJHdzTC/Wc8HEzHvce:+t5SZbDEj7RDe/q6wVBpGpRTvce
- TLSH T134E2D62B7744182AD9697239725786DF22E361990F4B0B477A3033BEFC29E501C66F83
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2