General
- Target cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074
- Size 59KB
- Sample261012-ysxejaee87
- SHA256 cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074
- MD5 8675369211c7b0c17a3d193a44a0b863
- SHA1 bfce51b038983a8914ecedf009aaa6ed4e8c63e2
- SHA512 980ff5a6e297d87ef81ee400f4c529e04939c36277806429f8ef0793b62278f72cb05a16ed4d0372101e3f2186b9da7b2260542dc75db269a44b3f88a75985fd
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRiZ:BL+bxmc+kHfrx83SAZ
- TLSH T17853F1A994948F3EE8D7FAB2DFB542749C3539FA4F9A42150F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074
- Size 59KB
- SHA256 cf9535698de37c7f44d785f0b4efcc8161a7f728c0dc56cf14580d59508d5074
- MD5 8675369211c7b0c17a3d193a44a0b863
- SHA1 bfce51b038983a8914ecedf009aaa6ed4e8c63e2
- SHA512 980ff5a6e297d87ef81ee400f4c529e04939c36277806429f8ef0793b62278f72cb05a16ed4d0372101e3f2186b9da7b2260542dc75db269a44b3f88a75985fd
- SSDEEP 1536:BJsXcv+bxpkmitg1IxdsHfRhx83US4HRiZ:BL+bxmc+kHfrx83SAZ
- TLSH T17853F1A994948F3EE8D7FAB2DFB542749C3539FA4F9A42150F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1