General
- Target 45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357
- Size 135KB
- Sample260925-ml4pgstfrd
- SHA256 45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357
- MD5 f5ee0e83547ae3fb9a9de1221c8ffb4b
- SHA1 51ebdce2e63a557c78e24f2c68fc25d3197e4ea8
- SHA512 6897c83bb3b62760f8add2eb2a832b7f8c6ed24513e704c5530ec8b97f7e1e238841ddb1e34f83ae7e18ed5bf9fa0d838cd41d0f96e5407dfd4bc66be5a6d97f
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F02:4qZ4h4fIqPWQd/4KUNNFd
- TLSH T11DD32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357
- Size 135KB
- SHA256 45c471a16a1dbf5170822d9519e7c2d80a949171314bed521ae809645b1fc357
- MD5 f5ee0e83547ae3fb9a9de1221c8ffb4b
- SHA1 51ebdce2e63a557c78e24f2c68fc25d3197e4ea8
- SHA512 6897c83bb3b62760f8add2eb2a832b7f8c6ed24513e704c5530ec8b97f7e1e238841ddb1e34f83ae7e18ed5bf9fa0d838cd41d0f96e5407dfd4bc66be5a6d97f
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F02:4qZ4h4fIqPWQd/4KUNNFd
- TLSH T11DD32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1