General
- Target 761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34
- Size 59KB
- Sample261011-2wt1csdw5v
- SHA256 761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34
- MD5 7a216b31c3f957f7b12fccfef1688e53
- SHA1 037f1851c24ed1d883bc961d21a8da25f63c53ae
- SHA512 edbfa71127238d49fe18549383a0f08506d29b17a38e218c9b25eea7265f253e9f7499e509b064e2825dea7d8767aa71cf05da5f02a1388b2f4cbf63d7fd0de8
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:ZL+bxmc+kHfrx83SAE
- TLSH T1E653F2A598948F3EE8D7FAB29FB542749C3539FA4F9A42150F0D743E9739A800A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34
- Size 59KB
- SHA256 761f2b28eebf0a2c6f5f375f33c47ccf15fd2345489c4a78030ecd5743e5fd34
- MD5 7a216b31c3f957f7b12fccfef1688e53
- SHA1 037f1851c24ed1d883bc961d21a8da25f63c53ae
- SHA512 edbfa71127238d49fe18549383a0f08506d29b17a38e218c9b25eea7265f253e9f7499e509b064e2825dea7d8767aa71cf05da5f02a1388b2f4cbf63d7fd0de8
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:ZL+bxmc+kHfrx83SAE
- TLSH T1E653F2A598948F3EE8D7FAB29FB542749C3539FA4F9A42150F0D743E9739A800A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1