General
- Target bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718
- Size 259KB
- Sample261002-lprnnafb43
- SHA256 bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718
- MD5 e03aed4c121177e4ab380867d6c36ac8
- SHA1 43c835b9485b50b5aaf537c0cdbcab55c08723f5
- SHA512 a6f1096589ed37142a8e4d78d4dea4732adfd744c2136b8eca95e9369b03294db51b6fdddd9d53122aed8a0291be14c675d738bc672d7b2285552c38243c13fc
- SSDEEP 3072:ufDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuIK2CsmX:MGzDegC51mszqUXfuIKmmX
- TLSH T179442A19FA0704F1EA33977244EFE63BC211B81686379E6FEB4FDA4478734662809385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718
- Size 259KB
- SHA256 bfa44bfaecbf5b27fdc3714b60be06c3917a84f6ac0fa6222b94ec8c47ca7718
- MD5 e03aed4c121177e4ab380867d6c36ac8
- SHA1 43c835b9485b50b5aaf537c0cdbcab55c08723f5
- SHA512 a6f1096589ed37142a8e4d78d4dea4732adfd744c2136b8eca95e9369b03294db51b6fdddd9d53122aed8a0291be14c675d738bc672d7b2285552c38243c13fc
- SSDEEP 3072:ufDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuIK2CsmX:MGzDegC51mszqUXfuIKmmX
- TLSH T179442A19FA0704F1EA33977244EFE63BC211B81686379E6FEB4FDA4478734662809385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1