General
- Target 8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2
- Size 135KB
- Sample261011-b168datxbs
- SHA256 8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2
- MD5 2bd4cb654e872e709cae60423621cb72
- SHA1 2fb9764d6f0db10cd75d49c70681d9e4940900ec
- SHA512 c7936755b6307a0d624dafd671663dfa55320e85019dfdef33aec1663285d90e4f19648c3b2956abd0007c1a931632069832cab2acb7205a7e8f6bf9a5a03c2a
- SSDEEP 3072:7NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0y:KqZ4h4fIqPWQd/4KUNNF/
- TLSH T1A2D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2
- Size 135KB
- SHA256 8df77c9e578116a100d124897fb1b1ad30b8121f6fcfcc4e2d8f9588ec3272d2
- MD5 2bd4cb654e872e709cae60423621cb72
- SHA1 2fb9764d6f0db10cd75d49c70681d9e4940900ec
- SHA512 c7936755b6307a0d624dafd671663dfa55320e85019dfdef33aec1663285d90e4f19648c3b2956abd0007c1a931632069832cab2acb7205a7e8f6bf9a5a03c2a
- SSDEEP 3072:7NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0y:KqZ4h4fIqPWQd/4KUNNF/
- TLSH T1A2D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1