General
- Target 0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c
- Size 135KB
- Sample261011-2a487s113m
- SHA256 0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c
- MD5 ba616a70d97282f99d0d76afbfbae2b8
- SHA1 c132553a9cc3ee9ea867e92083fc62c5a8d3eab8
- SHA512 fcbd3b6e362e74bcc1fb236b8a1bb2c4f4828b210815d671593dc23dd5f46888933850c431042a72f922bbaea4bd4a53c199d185e5ad5278a8c06ca89d5ce589
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F08:OqZ4h4fIqPWQd/4KUNNFV
- TLSH T1EBD32849EB8310F1FE6301B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c
- Size 135KB
- SHA256 0815f5eb71c02ccf782eccc3dc5c7a2d78d37bc9a13021bc9d24abd0f0993d4c
- MD5 ba616a70d97282f99d0d76afbfbae2b8
- SHA1 c132553a9cc3ee9ea867e92083fc62c5a8d3eab8
- SHA512 fcbd3b6e362e74bcc1fb236b8a1bb2c4f4828b210815d671593dc23dd5f46888933850c431042a72f922bbaea4bd4a53c199d185e5ad5278a8c06ca89d5ce589
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F08:OqZ4h4fIqPWQd/4KUNNFV
- TLSH T1EBD32849EB8310F1FE6301B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1