General
- Target 59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c
- Size 135KB
- Sample261011-3mls3abe38
- SHA256 59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c
- MD5 ca0153872c8a4a02cef0ecc868d8ce7d
- SHA1 a92a1e3ff3438ab4fb3edbc3d48db42796fafa5d
- SHA512 c83a9c5a5ea40d19a4d3d5b28458a0bf7be1a2a405fdda528af8dcfcff0125422058aebf1df7e5e7767297e61778b4b480d7d87414f02682cb7c191276dba066
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0H:gqZ4h4fIqPWQd/4KUNNFy
- TLSH T1ECD32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c
- Size 135KB
- SHA256 59030014bff236194bac1070db796db23f6fdea2983a47b77e7e794bed30ea2c
- MD5 ca0153872c8a4a02cef0ecc868d8ce7d
- SHA1 a92a1e3ff3438ab4fb3edbc3d48db42796fafa5d
- SHA512 c83a9c5a5ea40d19a4d3d5b28458a0bf7be1a2a405fdda528af8dcfcff0125422058aebf1df7e5e7767297e61778b4b480d7d87414f02682cb7c191276dba066
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0H:gqZ4h4fIqPWQd/4KUNNFy
- TLSH T1ECD32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1