General
- Target 6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd
- Size 59KB
- Sample261011-kb61raytft
- SHA256 6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd
- MD5 ed5c647beba77268532ad30e43a9e387
- SHA1 551e66e2f6aca251958063e7c004b3feb4e89722
- SHA512 89dd823141c8043113e8527d73989994af69aa34fa0e01af46b7bfa7d56c7c241372fca1f4ecd6db28c33f02fae73b524342ab190abc8cb015e97eb23c384cd3
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRio:RL+bxmc+kHfrx83SAo
- TLSH T1BC53F1A9A4948B3EE8D7FAB2DFB542709C3139FA4F4A42180F0D743E9B79AC00677111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd
- Size 59KB
- SHA256 6e45452905a4fad41c03999605e42737c519b0a5c994f5a20b4a57b00f3e7fbd
- MD5 ed5c647beba77268532ad30e43a9e387
- SHA1 551e66e2f6aca251958063e7c004b3feb4e89722
- SHA512 89dd823141c8043113e8527d73989994af69aa34fa0e01af46b7bfa7d56c7c241372fca1f4ecd6db28c33f02fae73b524342ab190abc8cb015e97eb23c384cd3
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRio:RL+bxmc+kHfrx83SAo
- TLSH T1BC53F1A9A4948B3EE8D7FAB2DFB542709C3139FA4F4A42180F0D743E9B79AC00677111
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1