General
- Target c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46
- Size 135KB
- Sample261011-3chcwsysh1
- SHA256 c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46
- MD5 d00e53fc8cbb66bd3b934539708a3289
- SHA1 04666f34a3b2d66b0891db09ccd26d59f51471be
- SHA512 8ffaee16c9cea7be2774ae23ce75e65f255bf7d3680382558728a42b82e2e40b4eac4930370c17e389af0f31cc8442cec4a8f10ca82de7595e38aaf316487f88
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0f:nqZ4h4fIqPWQd/4KUNNFu
- TLSH T198D32849EB8310F0FE6701B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46
- Size 135KB
- SHA256 c0c9c55605c646a6fb167fd40ef08842ad69ea101866e0e2f6d7cfeca676dc46
- MD5 d00e53fc8cbb66bd3b934539708a3289
- SHA1 04666f34a3b2d66b0891db09ccd26d59f51471be
- SHA512 8ffaee16c9cea7be2774ae23ce75e65f255bf7d3680382558728a42b82e2e40b4eac4930370c17e389af0f31cc8442cec4a8f10ca82de7595e38aaf316487f88
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0f:nqZ4h4fIqPWQd/4KUNNFu
- TLSH T198D32849EB8310F0FE6701B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1