General
- Target 891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed
- Size 59KB
- Sample261011-2bbchs114j
- SHA256 891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed
- MD5 1f1bb5102211b9683f9fc6b5ca79927f
- SHA1 69c6f606e4279f3b5e90b11b3ebdde33a9e2effe
- SHA512 1eac45bca87804fea8d8305e34f3ef1ed89fe2efdc0e5d327b5f7a8d92aa845f2331091f47402491268bbbc426ee2fc319d7e0c6de291ad5a4bbcb26ec9c8dff
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRig:BL+bxmc+kHfrx83SAg
- TLSH T11153F1A594948F3EE8D7FAB2DFB542749C353AFA4F8A42150F0D743E9B69AC00673201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed
- Size 59KB
- SHA256 891c5c76c8c481f0797fa9784885fbd98cfe97e10c5b40720258d919102aeaed
- MD5 1f1bb5102211b9683f9fc6b5ca79927f
- SHA1 69c6f606e4279f3b5e90b11b3ebdde33a9e2effe
- SHA512 1eac45bca87804fea8d8305e34f3ef1ed89fe2efdc0e5d327b5f7a8d92aa845f2331091f47402491268bbbc426ee2fc319d7e0c6de291ad5a4bbcb26ec9c8dff
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRig:BL+bxmc+kHfrx83SAg
- TLSH T11153F1A594948F3EE8D7FAB2DFB542749C353AFA4F8A42150F0D743E9B69AC00673201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1