General
- Target f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758
- Size 59KB
- Sample261009-yhszcsszbs
- SHA256 f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758
- MD5 d82399fc264dacd5bc8bc0bc8fea95c2
- SHA1 ddcf4b04c08601eb008243de1fb03f6faf790e57
- SHA512 91cd53cec21f3b96c3f9f7d13fc9a6e0c7ce35bc4305fa99bc54441b481dca9640936c5bdc886813af4842e8d897e1059b174ffc0d75e3b21ebb2be5305268a2
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRit:BL+bxmc+kHfrx83SAt
- TLSH T1D753F1A594A48F3EE8D7FAB29FB542709C3539FA4F8A42250F0D743E9B79A800677101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758
- Size 59KB
- SHA256 f208b726be563581bf61047110be056ff0624ee0fffa88864a4579348fdf8758
- MD5 d82399fc264dacd5bc8bc0bc8fea95c2
- SHA1 ddcf4b04c08601eb008243de1fb03f6faf790e57
- SHA512 91cd53cec21f3b96c3f9f7d13fc9a6e0c7ce35bc4305fa99bc54441b481dca9640936c5bdc886813af4842e8d897e1059b174ffc0d75e3b21ebb2be5305268a2
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRit:BL+bxmc+kHfrx83SAt
- TLSH T1D753F1A594A48F3EE8D7FAB29FB542709C3539FA4F8A42250F0D743E9B79A800677101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1