General
- Target 22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81
- Size 59KB
- Sample261011-xry2asfd44
- SHA256 22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81
- MD5 da64e1e4bce63017c96c4c5b9f685346
- SHA1 2a358c45abb36346fab532c886fb7a161233f541
- SHA512 1ee781b527d1b556d1b2ddc6171f80cbbfe72d5958fd2f181490956ea352d7dfdebfb09b6d51367f26488621ee645bd8d52b1b80a737c75418ae09a761c1a481
- SSDEEP 1536:2JsXcv+bxpkmitg1IxdsHfRhx83US4HRi+:2L+bxmc+kHfrx83SA+
- TLSH T15B53F1A9A4A48F3EE8D7FAB2DFB542709C3539FA4F5A42150F0D743E9779A800673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81
- Size 59KB
- SHA256 22c27ae1397f6aa6b66baffb8f7e425efaa9acd0713b1e2445bc5a296c36aa81
- MD5 da64e1e4bce63017c96c4c5b9f685346
- SHA1 2a358c45abb36346fab532c886fb7a161233f541
- SHA512 1ee781b527d1b556d1b2ddc6171f80cbbfe72d5958fd2f181490956ea352d7dfdebfb09b6d51367f26488621ee645bd8d52b1b80a737c75418ae09a761c1a481
- SSDEEP 1536:2JsXcv+bxpkmitg1IxdsHfRhx83US4HRi+:2L+bxmc+kHfrx83SA+
- TLSH T15B53F1A9A4A48F3EE8D7FAB2DFB542709C3539FA4F5A42150F0D743E9779A800673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1