General
- Target d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d
- Size 135KB
- Sample261009-2wmlaaxt4k
- SHA256 d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d
- MD5 103322e9b0fe6b9cf16b5464967f9366
- SHA1 1ba29e876a7ea94acc904680942d84dbc9b160ff
- SHA512 476954e11fe62560ef7e4b3e513f788cfd6978e613d4a50ddf3b037d4ecd81b12eecc9d9588bfbc1c4ddd10f90f1fb7b8d15f6fe0532b09a69dfd8e59aa1682b
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0u:gqZ4h4fIqPWQd/4KUNNFB
- TLSH T149D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d
- Size 135KB
- SHA256 d3f423316c1c305a42e5dae3666eb1f740fda8bc5d0c632a963aeb94955bf21d
- MD5 103322e9b0fe6b9cf16b5464967f9366
- SHA1 1ba29e876a7ea94acc904680942d84dbc9b160ff
- SHA512 476954e11fe62560ef7e4b3e513f788cfd6978e613d4a50ddf3b037d4ecd81b12eecc9d9588bfbc1c4ddd10f90f1fb7b8d15f6fe0532b09a69dfd8e59aa1682b
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0u:gqZ4h4fIqPWQd/4KUNNFB
- TLSH T149D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1