General
- Target 8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21
- Size 135KB
- Sample261011-3eckesbb86
- SHA256 8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21
- MD5 4a0f82ba6742d8433ec9d73a7e2d8dcf
- SHA1 33118a4c2401ea0ad34588614983da7add7fc9cf
- SHA512 3c9edfcf0d097e0ca4f265c6a83b759e9b6fd3b2604b4574b368dcee3e742c409aa009e239704ae0a29d7480eb90fcedcac2b7ba3e49e9f3dc6869a06064a7fa
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0p:4qZ4h4fIqPWQd/4KUNNFi
- TLSH T1C5D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21
- Size 135KB
- SHA256 8f56aeb0fb2abb99484b7a4a5d1bba6cc0040a1197117821296387157bb28f21
- MD5 4a0f82ba6742d8433ec9d73a7e2d8dcf
- SHA1 33118a4c2401ea0ad34588614983da7add7fc9cf
- SHA512 3c9edfcf0d097e0ca4f265c6a83b759e9b6fd3b2604b4574b368dcee3e742c409aa009e239704ae0a29d7480eb90fcedcac2b7ba3e49e9f3dc6869a06064a7fa
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0p:4qZ4h4fIqPWQd/4KUNNFi
- TLSH T1C5D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1