General
- Target bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d
- Size 59KB
- Sample261012-yywp7aav7p
- SHA256 bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d
- MD5 04bfe586b689dfe7ff15f1f9b289727d
- SHA1 726124bc6d9c27f78e40312206bee61aa671fc4a
- SHA512 c4de6333ba5b0ff273dc816a80e9d9eead48f00e881d75c814be72df35b7a4cac6e0f2374959b78a145b65ae2c6b4902075dc426ce2da037280235724dac72f8
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRiN:KL+bxmc+kHfrx83SAN
- TLSH T14B53F1A5A4948F3EE8D7FAB29FB542749C3539FA4F5A42190F0D743E9769A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d
- Size 59KB
- SHA256 bdeaf2ed0e4a6016b069007ccb3717b0276b97e084a0cdcf29f22b946b01443d
- MD5 04bfe586b689dfe7ff15f1f9b289727d
- SHA1 726124bc6d9c27f78e40312206bee61aa671fc4a
- SHA512 c4de6333ba5b0ff273dc816a80e9d9eead48f00e881d75c814be72df35b7a4cac6e0f2374959b78a145b65ae2c6b4902075dc426ce2da037280235724dac72f8
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRiN:KL+bxmc+kHfrx83SAN
- TLSH T14B53F1A5A4948F3EE8D7FAB29FB542749C3539FA4F5A42190F0D743E9769A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1