General
- Target 0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a
- Size 59KB
- Sample261011-x99krawth1
- SHA256 0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a
- MD5 d39e893d5c93e6c85d337a1f207d75b5
- SHA1 1bbd6771aecbff6f704f164de19c1a32294aac4a
- SHA512 a3401231f13ebd6518edbf847c60f2fde9b71d14c6e98a7fe3ad638065ffe07ebeae01cf81f3450bfdce7704ecd5cf7a5092f0554303eb11f3e8f1cfcb50215d
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRik:RL+bxmc+kHfrx83SAk
- TLSH T18353F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F5A42250F0D743E9779A800A72201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a
- Size 59KB
- SHA256 0113bcc8f61cd10858d7e9fe10ea4cc6d1e4784715316f487157b5871bfa082a
- MD5 d39e893d5c93e6c85d337a1f207d75b5
- SHA1 1bbd6771aecbff6f704f164de19c1a32294aac4a
- SHA512 a3401231f13ebd6518edbf847c60f2fde9b71d14c6e98a7fe3ad638065ffe07ebeae01cf81f3450bfdce7704ecd5cf7a5092f0554303eb11f3e8f1cfcb50215d
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRik:RL+bxmc+kHfrx83SAk
- TLSH T18353F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F5A42250F0D743E9779A800A72201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1