General
- Target ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28
- Size 59KB
- Sample261009-yca7cssycz
- SHA256 ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28
- MD5 f5040a93e03d6269db0e65cdae3fb01e
- SHA1 528c4f088688512bb0bb4e9c6d59b867ff6635f6
- SHA512 2fb3e91c94c9f684b849c9032b817fecdf89b19d1b7a4f14397075c2b1d26636c89a1f4dcc377788644f8594741f85ff11ca8d0feb12ac6a87b4e18544f90870
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRia:KL+bxmc+kHfrx83SAa
- TLSH T1C253F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F9A42191F0D743E9769AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28
- Size 59KB
- SHA256 ffb697c4fb00582ce2db05ed7f4729b4a0bf1074796ac8287b0e76a0c07baa28
- MD5 f5040a93e03d6269db0e65cdae3fb01e
- SHA1 528c4f088688512bb0bb4e9c6d59b867ff6635f6
- SHA512 2fb3e91c94c9f684b849c9032b817fecdf89b19d1b7a4f14397075c2b1d26636c89a1f4dcc377788644f8594741f85ff11ca8d0feb12ac6a87b4e18544f90870
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRia:KL+bxmc+kHfrx83SAa
- TLSH T1C253F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F9A42191F0D743E9769AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1