General
- Target aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762
- Size 135KB
- Sample260925-x97fdsvfkh
- SHA256 aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762
- MD5 172ae7b25ad13121c97729c40a773a14
- SHA1 89e87ce4ef931bed0c4a280d71547e29332d928b
- SHA512 2e54e0bb8d8be24d3dcf626f60abe50b78a9f1bb4ab190547193b30a97cf50db1722bbe462404ce68ee8c7c0709acaf206e2d3cd5521f96426224854fdf0cfac
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F09:nqZ4h4fIqPWQd/4KUNNFI
- TLSH T127D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762
- Size 135KB
- SHA256 aaa97e27a0be51645988ac1894d994ff34748f9d8c90a42fd64ccd8e9c76d762
- MD5 172ae7b25ad13121c97729c40a773a14
- SHA1 89e87ce4ef931bed0c4a280d71547e29332d928b
- SHA512 2e54e0bb8d8be24d3dcf626f60abe50b78a9f1bb4ab190547193b30a97cf50db1722bbe462404ce68ee8c7c0709acaf206e2d3cd5521f96426224854fdf0cfac
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F09:nqZ4h4fIqPWQd/4KUNNFI
- TLSH T127D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1