General
- Target b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940
- Size 59KB
- Sample260925-llk2psda82
- SHA256 b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940
- MD5 931731adf307e206fded8b126370d681
- SHA1 4ad875ffe724f5aeda512374562fff6b5f499473
- SHA512 78831d03957cbe6968e52c212791f26a5e95570130f44e3bea6722d3bc6be3173c25f53d7b62dccb8a31913e459435523d236027d3a190cd8188652b0bb0f5cf
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRis:ZL+bxmc+kHfrx83SAs
- TLSH T15F53F1A5A4948F3EE8D7FAB2DFB542749C3539FA4F8A42150F0D743E9769A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940
- Size 59KB
- SHA256 b657d9f69b474847a564c53886d747a1d4ebbd6f18026f745a81434ed3347940
- MD5 931731adf307e206fded8b126370d681
- SHA1 4ad875ffe724f5aeda512374562fff6b5f499473
- SHA512 78831d03957cbe6968e52c212791f26a5e95570130f44e3bea6722d3bc6be3173c25f53d7b62dccb8a31913e459435523d236027d3a190cd8188652b0bb0f5cf
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRis:ZL+bxmc+kHfrx83SAs
- TLSH T15F53F1A5A4948F3EE8D7FAB2DFB542749C3539FA4F8A42150F0D743E9769A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1