General
- Target VirusShare_b2a2f5a0ce753df32514c29d89b4c53d.zip
- Size 54KB
- Sample261006-s8stdsc15k
- SHA256 d0f84620c85050b1dadc16cbe512e4bfcb4057f8c16f9ec2d9550ffc1bea0611
- MD5 6816f278b07c785243aa61b8f2660cc9
- SHA1 1f34789b714cfcb8137c43dcabb15c5a2021ed60
- SHA512 fef2ba521bb11ef3400eb1aeadd68dfc5d3b87ee8e68968b230176fea1d3aa2c327fb3a42c41b4a5b765210e5075eb01d94d6fc5e66413deb297e39c863d95d2
- SSDEEP 1536:J3IxPxeOXzcw0X3/FZiLvsO5CHoIB3qrcBU:2txJgnTssO5CHoE3c
- TLSH T1C2430260C664FB6B91E61EB8C0DB70B3DA1C31E4F86B61686792305CCD0DEB11E5B786
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c19d4be074414ee89b7b1eb57431649ac1cb636e6e663513a310aadfa630846c.exe
Resource
win10v2004-20260911-de
10 signatures
900 seconds
Malware Config
Targets
-
- Target c19d4be074414ee89b7b1eb57431649ac1cb636e6e663513a310aadfa630846c
- Size 124KB
- SHA256 c19d4be074414ee89b7b1eb57431649ac1cb636e6e663513a310aadfa630846c
- MD5 b2a2f5a0ce753df32514c29d89b4c53d
- SHA1 06b11036ee23d7b7ab15cd5c10a70e28e4009549
- SHA512 fe1c168eab14ace88332e624bc0f2da0fa30f791b6118f5ab9e4a4e20a3090d44108477ce57067041789f74eb92d4ec2de98cdc4da4893b677126f28becc79a6
- SSDEEP 3072:cyhC1QSwTyi7a6LE7WTdl//PhWYb5Dlr:cGtSwuiG6LEqfrrr
- TLSH T162C3B42A72D0F63BC425C6F83D1A43A4806DAD3415A1AD13F7D65F16B3F2EA79222743
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies visibility of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2