General
- Target 3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7
- Size 59KB
- Sample260926-1dk43asamd
- SHA256 3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7
- MD5 9c78c7176c3f6a5f377e87c2966f204d
- SHA1 7a209482fdd6423af7d9bd75f5841f6ebcaa8d34
- SHA512 b5b7fe02043cd3a9236b3c042a32275d9f864f6bc8374919e9fdd62ea6c9cedd0d00103edb960ad5c7fcf9ab8db3d3aeed930338eaddb8fed8ee2163be761718
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRih:RL+bxmc+kHfrx83SAh
- TLSH T14653F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F5A42250F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7
- Size 59KB
- SHA256 3bb0b5f227c1f8731a22371c3074656b7c55d04f00cbe747105eb44d790d43f7
- MD5 9c78c7176c3f6a5f377e87c2966f204d
- SHA1 7a209482fdd6423af7d9bd75f5841f6ebcaa8d34
- SHA512 b5b7fe02043cd3a9236b3c042a32275d9f864f6bc8374919e9fdd62ea6c9cedd0d00103edb960ad5c7fcf9ab8db3d3aeed930338eaddb8fed8ee2163be761718
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRih:RL+bxmc+kHfrx83SAh
- TLSH T14653F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F5A42250F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1