General
- Target c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe
- Size 59KB
- Sample261012-yxkarswx8r
- SHA256 c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe
- MD5 e82585c3c31ecdf9acdd6e5c9e86ec83
- SHA1 092466493b1ecfb861a1610027970df359787c72
- SHA512 b1d8e390a1e98062fdccdff9c34614b50a7c22bfeb8315e04d029662e5008d70f9b2df8a92daae0a50b13fc9b1b847bb9f219809d26b026ba06db1fd377232b2
- SSDEEP 1536:eJsXcv+bxpkmitg1IxdsHfRhx83US4HRiD:eL+bxmc+kHfrx83SAD
- TLSH T13453F1A594948F3EE8D3FAB29FB542749C3539FA4F9A42191F0D743E9779AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe
- Size 59KB
- SHA256 c126dc58d7af0612917c009a23837fee7882b30191badb8a47c02b8f5a1cd9fe
- MD5 e82585c3c31ecdf9acdd6e5c9e86ec83
- SHA1 092466493b1ecfb861a1610027970df359787c72
- SHA512 b1d8e390a1e98062fdccdff9c34614b50a7c22bfeb8315e04d029662e5008d70f9b2df8a92daae0a50b13fc9b1b847bb9f219809d26b026ba06db1fd377232b2
- SSDEEP 1536:eJsXcv+bxpkmitg1IxdsHfRhx83US4HRiD:eL+bxmc+kHfrx83SAD
- TLSH T13453F1A594948F3EE8D3FAB29FB542749C3539FA4F9A42191F0D743E9779AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1