General
- Target 0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e
- Size 59KB
- Sample261011-x219eact2z
- SHA256 0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e
- MD5 743df0c9b8f163a155f82f8cf7150043
- SHA1 d663c389acb5c7b7ebbbb24b201ac1f392c57a72
- SHA512 d58881ea0713b3a4d802b897cf9226bea27dfb15d2ed2ac9e0fb41049368d89ea00ccc5ec07c9abdbe938d73e5eabc184b2d2f92eec2e591e2de9fdd3771ffbc
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:BL+bxmc+kHfrx83SAE
- TLSH T13E53F1A594948F3EE8D7FAB2DFB542749C3535FA4F9A42150F0D743E9B69AC00673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e
- Size 59KB
- SHA256 0ddf3d398065b7a32f44ce9c4b51cb505a0819e5cf004ca2b20efaa7a1b7654e
- MD5 743df0c9b8f163a155f82f8cf7150043
- SHA1 d663c389acb5c7b7ebbbb24b201ac1f392c57a72
- SHA512 d58881ea0713b3a4d802b897cf9226bea27dfb15d2ed2ac9e0fb41049368d89ea00ccc5ec07c9abdbe938d73e5eabc184b2d2f92eec2e591e2de9fdd3771ffbc
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:BL+bxmc+kHfrx83SAE
- TLSH T13E53F1A594948F3EE8D7FAB2DFB542749C3535FA4F9A42150F0D743E9B69AC00673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1