General
- Target 881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0
- Size 135KB
- Sample260930-e81x4stt2n
- SHA256 881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0
- MD5 ad033bed915f517ed7980929a8bb10af
- SHA1 5f16c13104b943974a7d066a38f7f513b45635c0
- SHA512 ef592ae57a4295e72f65d50d477aa6982496537035b81b51ec9e4b4a05f51e2c8b02b11e0368cef469290f84e9dec9183129e0e9f9186a5743847d25d4f43da4
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0A:4qZ4h4fIqPWQd/4KUNNFn
- TLSH T115D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0
- Size 135KB
- SHA256 881318b78233fceff9338d401b1074616b209318b1b0cc272f0d9b123a6d92c0
- MD5 ad033bed915f517ed7980929a8bb10af
- SHA1 5f16c13104b943974a7d066a38f7f513b45635c0
- SHA512 ef592ae57a4295e72f65d50d477aa6982496537035b81b51ec9e4b4a05f51e2c8b02b11e0368cef469290f84e9dec9183129e0e9f9186a5743847d25d4f43da4
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0A:4qZ4h4fIqPWQd/4KUNNFn
- TLSH T115D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1