General
- Target 772d68ed53182ec4d5c85b104fa01c1d0cab0eaa48f9d6ad2b332f4802171c9c
- Size 5.4MB
- Sample260929-ptndks1xes
- SHA256 772d68ed53182ec4d5c85b104fa01c1d0cab0eaa48f9d6ad2b332f4802171c9c
- MD5 ada0e8c7ad9dbf82fc6f2e4ec4f944c7
- SHA1 c2e5ee235f8af5b76d60d0a155b5949036aa57d8
- SHA512 b0eefe884d74231d30685c4bd759a5023652aa63e4f3b1ebb353407e03539765b3d1c177e31816a5b4a7d4db8b357be73413c638817d7e40977d18978c8d2138
- SSDEEP 98304:+tlUKfpyt9dwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxs:+o+YFw/tyd3w++lz0bys
- TLSH T1C246022BF38B647DE06A56366AB29210953B7D1166128C4B97ECF44CDF321B01E3E397
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
Handy Backup 8 5 8 Crack Free Download Latest.exe
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target .Store
- Size 3.4MB
- SHA256 377abc9d367e61cb5c4761bf48dcfdf5bcd3822f303e0f972d7f4c8295a2ea79
- MD5 15596b41dba42cdcce4f677fbbc86b6e
- SHA1 1ed1e69e72028150f8562bff5ca1dd745874329a
- SHA512 d4e0d64f71027ecc6d85479542ed682359b37446cb1dccce5fa2972f152e27f3cb91a8ec0dc61270bc40038751a58982d4678efb929a3bc6d3546e072f51a9f2
- SSDEEP 98304:HwBOBfKt5yLFxNTZB7ktTq8K+ly8DfIbhGSqzxm:Hw/tyd3w++lz0bym
- TLSH T1CDF5234AF7951CF4E5A3E2758AA1450BE3737C563B3093CF2760566A2F232915E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target Handy Backup 8 5 8 Crack Free Download Latest.exe
- Size 2.0MB
- SHA256 392ac9ec44ec70c9abbfba1f1210bb817f2089c5abf31d2b6c609abbd6b8e3f9
- MD5 c96d03ca530c1aeb2e836db9e208ebcc
- SHA1 e6653390066bebab8d7f6e9e6dca80e0661b81fd
- SHA512 2883181f12502cbf5aae8b18f16e95b3ffb08d594ddbd35b39e8a8091f550f3346ce0812ef2ac21b0c416273525b389d3a9a04d9accd5f18afa1da0c68f61913
- SSDEEP 24576:iXfPki0RBC19GXIVdI7lI3gJXpJehyxwKlvdXgKfpXrbEL10B+kM/PfcXmH1bmBe:wobJIQB2+TwKfpbR+/T1bmBXfqT
- TLSH T1F8A5C03BF28BA13EE06E1A367A72A210553BBA1165164C1696FCF84CCF355701E3F687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1