General
- Target f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d
- Size 59KB
- Sample261009-yf249asyht
- SHA256 f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d
- MD5 fec0132df2aceb1afa29b5f1a0168265
- SHA1 f409f3d278d9f407401864dce1881130511e54d5
- SHA512 0fe97ea0ffce6f94994b6299e7af6c048cc755c9b892c77ab00922621ab3c33318b5753835ff2cdbca271a413f40f6aca8acb8a1c1792a8be6fd66c19577eb8d
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiK0:ZL+bxmc+kHfrx83SAK0
- TLSH T10753F1A5A4A48F3EE8D3FAB2DFB542709C3139FA4F4A42250F1D743E9769AC00A72141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d
- Size 59KB
- SHA256 f4e9817ba0ef9dfe53fa58e7de0790eca0c2168a235c4cc664ce8716d6aacf0d
- MD5 fec0132df2aceb1afa29b5f1a0168265
- SHA1 f409f3d278d9f407401864dce1881130511e54d5
- SHA512 0fe97ea0ffce6f94994b6299e7af6c048cc755c9b892c77ab00922621ab3c33318b5753835ff2cdbca271a413f40f6aca8acb8a1c1792a8be6fd66c19577eb8d
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiK0:ZL+bxmc+kHfrx83SAK0
- TLSH T10753F1A5A4A48F3EE8D3FAB2DFB542709C3139FA4F4A42250F1D743E9769AC00A72141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1