General
- Target 7bd8416f4b652fb89937e4fa4acb9d10531290d6042f23950c09cf2fd0eee0e2
- Size 7.1MB
- Sample260916-pcxwpaxyft
- SHA256 7bd8416f4b652fb89937e4fa4acb9d10531290d6042f23950c09cf2fd0eee0e2
- MD5 8d01f5a1d42fec23a92182fce7079963
- SHA1 2c440f93b936e3aaa1672e05dbe4c521027724b6
- SHA512 afdce8a557efba85adcbea5c01c430755362f1022ac2f2ad9dfcae9d432555c4c125ca62ee4d625ef17ccf6be1a190fff754743a670895ad72f03a695e94479c
- SSDEEP 196608:tt7yiWO7yiv7yi+qO7yiv7yiBy4qO7yivj:txDZQZvfR
- TLSH T15376F123A3A05433E17717399C6B53699936BE103E39DD072BE46C0C9EB97817C2A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7bd8416f4b652fb89937e4fa4acb9d10531290d6042f23950c09cf2fd0eee0e2.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 7bd8416f4b652fb89937e4fa4acb9d10531290d6042f23950c09cf2fd0eee0e2
- Size 7.1MB
- SHA256 7bd8416f4b652fb89937e4fa4acb9d10531290d6042f23950c09cf2fd0eee0e2
- MD5 8d01f5a1d42fec23a92182fce7079963
- SHA1 2c440f93b936e3aaa1672e05dbe4c521027724b6
- SHA512 afdce8a557efba85adcbea5c01c430755362f1022ac2f2ad9dfcae9d432555c4c125ca62ee4d625ef17ccf6be1a190fff754743a670895ad72f03a695e94479c
- SSDEEP 196608:tt7yiWO7yiv7yi+qO7yiv7yiBy4qO7yivj:txDZQZvfR
- TLSH T15376F123A3A05433E17717399C6B53699936BE103E39DD072BE46C0C9EB97817C2A367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1