General
- Target 6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7
- Size 59KB
- Sample261011-3scgksbf92
- SHA256 6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7
- MD5 36a28027690053550b0da13ae935aa13
- SHA1 ac02860bbe687f1a492ee1e194b689500e855d05
- SHA512 d1b21afdbd1151cff7defc456264441e19bca6134b22c67d32eb4b7da667f4bead66c4d337b6c9225d640e427d09e4bbd34621fc05f7eb1783920a34a37a8597
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRip:LL+bxmc+kHfrx83SAp
- TLSH T1F253F1A5A4948F3EE8D3FAB2DFB542709C3135FA4F9A42250F0D743E9779AC00A72101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7
- Size 59KB
- SHA256 6a44562360f0c678839b59a06f0bb124d636ee266d6ab1f0437ffa071fc554d7
- MD5 36a28027690053550b0da13ae935aa13
- SHA1 ac02860bbe687f1a492ee1e194b689500e855d05
- SHA512 d1b21afdbd1151cff7defc456264441e19bca6134b22c67d32eb4b7da667f4bead66c4d337b6c9225d640e427d09e4bbd34621fc05f7eb1783920a34a37a8597
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRip:LL+bxmc+kHfrx83SAp
- TLSH T1F253F1A5A4948F3EE8D3FAB2DFB542709C3135FA4F9A42250F0D743E9779AC00A72101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1