General
- Target 425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc
- Size 59KB
- Sample261002-nfmpfsszdz
- SHA256 425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc
- MD5 e3a1153d6ffd1f67cf966ca5e931160d
- SHA1 3f3f5709ac1f9aadc0bc7908d05940f5b03fa083
- SHA512 6359016c8ab6876ba7f3002caad6ab73841c71eb8b229f9bccdcbb2f726733f368ddf060d936ab00f2eca1188f7d7d9afe538b009ed16ebf7cdac56afa219a20
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRi4:ZL+bxmc+kHfrx83SA4
- TLSH T19C53F1A598A48F3EE8D7FAB29FB542709C3539FA4F9A42150F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc
- Size 59KB
- SHA256 425c886437428b3cd5677a9a39c935ab7fa0abde4fa8a36fabdffb501fa408fc
- MD5 e3a1153d6ffd1f67cf966ca5e931160d
- SHA1 3f3f5709ac1f9aadc0bc7908d05940f5b03fa083
- SHA512 6359016c8ab6876ba7f3002caad6ab73841c71eb8b229f9bccdcbb2f726733f368ddf060d936ab00f2eca1188f7d7d9afe538b009ed16ebf7cdac56afa219a20
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRi4:ZL+bxmc+kHfrx83SA4
- TLSH T19C53F1A598A48F3EE8D7FAB29FB542709C3539FA4F9A42150F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1