General
- Target 26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f
- Size 135KB
- Sample260930-pxdcsawxds
- SHA256 26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f
- MD5 60b53751c01341b09f6c6b8914a8bdb4
- SHA1 c76a3074cef0cac613db9b073fccce281ac6c43a
- SHA512 0518a5f94d5c162e7339d232740abb2cc236ffc7a8610c6827166d75808f3dab0dbf815a0fea17fdfa70763512e251f94dee994b3544a1e3f4b50c547ad4c6b2
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0H:5qZ4h4fIqPWQd/4KUNNF8
- TLSH T1B6D31849EB9310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f
- Size 135KB
- SHA256 26ae68548849a4d2de09841ade5ad67327c488b049485bfc1122f2d4539b403f
- MD5 60b53751c01341b09f6c6b8914a8bdb4
- SHA1 c76a3074cef0cac613db9b073fccce281ac6c43a
- SHA512 0518a5f94d5c162e7339d232740abb2cc236ffc7a8610c6827166d75808f3dab0dbf815a0fea17fdfa70763512e251f94dee994b3544a1e3f4b50c547ad4c6b2
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0H:5qZ4h4fIqPWQd/4KUNNF8
- TLSH T1B6D31849EB9310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1