General
- Target 2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a
- Size 59KB
- Sample260930-gbc6wsfg93
- SHA256 2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a
- MD5 c36f9aab66aa4e54eaea2a36bce28e51
- SHA1 ddefb74d085d4073fbc4b5b9cf537225471e7c4e
- SHA512 3caba92dec92d20c261212aea528e0f042edd455b3f8cfb7dac5865aaea25d94374745313e5e157193a004ec7cd2da1a21fc9f8104694ca50237e7cf9aef1ce8
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRij:HL+bxmc+kHfrx83SAj
- TLSH T1D253F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F8A42190F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a
- Size 59KB
- SHA256 2e752b9498cc15a0cd8d9131651a2731b90aafe67e453b9acf867999e15cbe9a
- MD5 c36f9aab66aa4e54eaea2a36bce28e51
- SHA1 ddefb74d085d4073fbc4b5b9cf537225471e7c4e
- SHA512 3caba92dec92d20c261212aea528e0f042edd455b3f8cfb7dac5865aaea25d94374745313e5e157193a004ec7cd2da1a21fc9f8104694ca50237e7cf9aef1ce8
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRij:HL+bxmc+kHfrx83SAj
- TLSH T1D253F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F8A42190F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1