General
- Target 9cb2597aee2a20858a412c478da6ef08f00fd18f69812590753db33f79315fd0
- Size 6.6MB
- Sample260912-syxpladh53
- SHA256 9cb2597aee2a20858a412c478da6ef08f00fd18f69812590753db33f79315fd0
- MD5 0f5e3332928694933fdf3b8a3470c000
- SHA1 b0befc206b56e1fe4e89efc8dbeab3dd45562390
- SHA512 b9cf6d32ab0d42824e03bfade593b48d35731134ebb55f5a709b14a72581719e1f327596455a0a598988963d6cc59a4f3f952c1faeed7ae67cf840eefc9c92b8
- SSDEEP 49152:04xat17oBHcOwimtZHt4xat17oBHcOwimtZHt4xat17oBHcOwimtZHt4xat17oB/:0ydYnNydYnNydYnNydYnNydYnNyl
- TLSH T10B66F126F6F14437D1236EB8DC1F536CA8267E502D3464863BE82D48AF3D781753B29A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9cb2597aee2a20858a412c478da6ef08f00fd18f69812590753db33f79315fd0.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target 9cb2597aee2a20858a412c478da6ef08f00fd18f69812590753db33f79315fd0
- Size 6.6MB
- SHA256 9cb2597aee2a20858a412c478da6ef08f00fd18f69812590753db33f79315fd0
- MD5 0f5e3332928694933fdf3b8a3470c000
- SHA1 b0befc206b56e1fe4e89efc8dbeab3dd45562390
- SHA512 b9cf6d32ab0d42824e03bfade593b48d35731134ebb55f5a709b14a72581719e1f327596455a0a598988963d6cc59a4f3f952c1faeed7ae67cf840eefc9c92b8
- SSDEEP 49152:04xat17oBHcOwimtZHt4xat17oBHcOwimtZHt4xat17oBHcOwimtZHt4xat17oB/:0ydYnNydYnNydYnNydYnNydYnNyl
- TLSH T10B66F126F6F14437D1236EB8DC1F536CA8267E502D3464863BE82D48AF3D781753B29A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1