General
- Target 2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673
- Size 59KB
- Sample261011-xll5jsfb79
- SHA256 2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673
- MD5 92b0705027ac1969f7290b0c289f96bb
- SHA1 00873c318f428bce08d13438dd119c8daeb0a795
- SHA512 bce50505d18ebfa702ea0937d5d36fe390dafa802758099f37c89ee192cb4555647df862980a2ce6ac145c1b94c1b0f351d2cc5cd6cbcb9b6dc56adc267b84f6
- SSDEEP 1536:2JsXcv+bxpkmitg1IxdsHfRhx83US4HRiN:2L+bxmc+kHfrx83SAN
- TLSH T1F953F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F9A42150F0D743E9779AC00A72141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673
- Size 59KB
- SHA256 2d2a2df270cf7a6868fc3a8f667985915c5f7d3caa26440cc26c7a8ab0c4c673
- MD5 92b0705027ac1969f7290b0c289f96bb
- SHA1 00873c318f428bce08d13438dd119c8daeb0a795
- SHA512 bce50505d18ebfa702ea0937d5d36fe390dafa802758099f37c89ee192cb4555647df862980a2ce6ac145c1b94c1b0f351d2cc5cd6cbcb9b6dc56adc267b84f6
- SSDEEP 1536:2JsXcv+bxpkmitg1IxdsHfRhx83US4HRiN:2L+bxmc+kHfrx83SAN
- TLSH T1F953F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F9A42150F0D743E9779AC00A72141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1