General
- Target 79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd
- Size 59KB
- Sample261011-2vd8hsaf65
- SHA256 79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd
- MD5 968e7e74ec17c71b194c3215f32d6a95
- SHA1 8025a2fe2693e2f4a8cb941f7f924dcb2ce4b5f7
- SHA512 ae8219ebade6dfaaec539389ba22482e4df3b07d40c194d39c804e7b4a58a2744fe54877a73d1488d91b4ee41834f765fdc5b447430c17ad0b97d3207d6f03f9
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRir:KL+bxmc+kHfrx83SAr
- TLSH T10053F1A5A4A48F3EE8D7FAB2DFB542709C3539FA4F5A42191F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd
- Size 59KB
- SHA256 79383b37f7d5744a4501fc5d6518e0c723e965f5c80d0e82344d9b8725af98cd
- MD5 968e7e74ec17c71b194c3215f32d6a95
- SHA1 8025a2fe2693e2f4a8cb941f7f924dcb2ce4b5f7
- SHA512 ae8219ebade6dfaaec539389ba22482e4df3b07d40c194d39c804e7b4a58a2744fe54877a73d1488d91b4ee41834f765fdc5b447430c17ad0b97d3207d6f03f9
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRir:KL+bxmc+kHfrx83SAr
- TLSH T10053F1A5A4A48F3EE8D7FAB2DFB542709C3539FA4F5A42191F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1