General
- Target 93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e
- Size 59KB
- Sample261009-zbdfrstvbx
- SHA256 93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e
- MD5 76d86047599fa822d388d75e7af2235d
- SHA1 16095975837158be83d213a315b551939d9847d4
- SHA512 c139dd2fdcbdce97be991d519bb668ebfea3fc2dc90f08b34d8d77b401d42ba5f10deeeceb90342510c5f69af0525f14baec350f2d9f186780d4b4bc29a0b954
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRi2:NL+bxmc+kHfrx83SA2
- TLSH T1C053F1A598A48F3EE8D3FAB29FB542709C3539FA4F5A42190F0D743E9779AC00673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e
- Size 59KB
- SHA256 93b7b87f2aa54052990bcc3378710d20e490d8442f0e001882897d0c0f65f65e
- MD5 76d86047599fa822d388d75e7af2235d
- SHA1 16095975837158be83d213a315b551939d9847d4
- SHA512 c139dd2fdcbdce97be991d519bb668ebfea3fc2dc90f08b34d8d77b401d42ba5f10deeeceb90342510c5f69af0525f14baec350f2d9f186780d4b4bc29a0b954
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRi2:NL+bxmc+kHfrx83SA2
- TLSH T1C053F1A598A48F3EE8D3FAB29FB542709C3539FA4F5A42190F0D743E9779AC00673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1