General
- Target 9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c
- Size 135KB
- Sample260930-e64afsef95
- SHA256 9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c
- MD5 face82dc5239442a0bf9615c1f79a7c8
- SHA1 233959bcbf14a9df7d8310fd1c37f51db41ad602
- SHA512 8a9b4232d4f0fad470c5c1d052cb2da7d476b8bb307c21a5a9c01e719819aca83f8f16ae3dcdc10bc085be50c9320aaf337859e9f44ebde0a9bc8c2ebf55ac90
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0K:4qZ4h4fIqPWQd/4KUNNFl
- TLSH T161D32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c
- Size 135KB
- SHA256 9cca96282f6d6082e5982edd54724b4756ef1f1af9249d322e0257c822adf58c
- MD5 face82dc5239442a0bf9615c1f79a7c8
- SHA1 233959bcbf14a9df7d8310fd1c37f51db41ad602
- SHA512 8a9b4232d4f0fad470c5c1d052cb2da7d476b8bb307c21a5a9c01e719819aca83f8f16ae3dcdc10bc085be50c9320aaf337859e9f44ebde0a9bc8c2ebf55ac90
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0K:4qZ4h4fIqPWQd/4KUNNFl
- TLSH T161D32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1