General
- Target 3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2
- Size 135KB
- Sample261009-2j1mdaef97
- SHA256 3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2
- MD5 56df8b58ad536191b184814a4b8cca95
- SHA1 2d9842c42333e9e6ab14d2e959c016f8a03aa1b9
- SHA512 f843069f2ffdc0bfdacfd6d94fe3b546b5bcffcf1a79672ed1592b904b1b34abda3c61f35ac9c8a36e6679b4c3f4450733912ecc54a0240fba07f2bc0c78b5f4
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0K:gqZ4h4fIqPWQd/4KUNNFb
- TLSH T14BD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2
- Size 135KB
- SHA256 3e943eeb0d33feb2e028b9c0a3ff3d13385196ec9fe1c8221c149abab234ecd2
- MD5 56df8b58ad536191b184814a4b8cca95
- SHA1 2d9842c42333e9e6ab14d2e959c016f8a03aa1b9
- SHA512 f843069f2ffdc0bfdacfd6d94fe3b546b5bcffcf1a79672ed1592b904b1b34abda3c61f35ac9c8a36e6679b4c3f4450733912ecc54a0240fba07f2bc0c78b5f4
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0K:gqZ4h4fIqPWQd/4KUNNFb
- TLSH T14BD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1