General
- Target 4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc
- Size 135KB
- Sample261011-3a2nraysgv
- SHA256 4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc
- MD5 049847ddd38ec9c3d1c295b118574c6f
- SHA1 aafeb6073d7aab876da2c2be96801a7a43f1d446
- SHA512 d44706fdc393b7b770091dabb629a3c8abcad7f742d5b17104a0282c7a60f0920555231c46640c8bd036ead81289b7f73bc83325bc13f51b10ce7b573f962ad3
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0o:5qZ4h4fIqPWQd/4KUNNFR
- TLSH T10ED32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc
- Size 135KB
- SHA256 4c88d3aea4fb469d1e3a07cdd151ac10a0569805c4d221898bbd9a3cd8a3b8cc
- MD5 049847ddd38ec9c3d1c295b118574c6f
- SHA1 aafeb6073d7aab876da2c2be96801a7a43f1d446
- SHA512 d44706fdc393b7b770091dabb629a3c8abcad7f742d5b17104a0282c7a60f0920555231c46640c8bd036ead81289b7f73bc83325bc13f51b10ce7b573f962ad3
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0o:5qZ4h4fIqPWQd/4KUNNFR
- TLSH T10ED32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1