General
- Target 76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0
- Size 59KB
- Sample261013-2cs9qact4y
- SHA256 76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0
- MD5 603c044db3df18a5c81ac3efc4767f0b
- SHA1 2cf8fc33a336f9779ee69300d0d8c72475e5c0bd
- SHA512 f53fdcc58cdc9ed119890a6694b5956162378315e7c977d3ae3b8ab1b40111586b257aa0d5d49e79fe423e0d7f823138c1ad2a85882565f20fe345a0ae1fb981
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRiA:RL+bxmc+kHfrx83SAA
- TLSH T19453F1A9A4948B3EE8D3FAB2DFB542709C3139FA4F8A42150F1D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0
- Size 59KB
- SHA256 76219521d813a6c21975b33e6aa12c68cd504354adad35820e1c223c5e96cbb0
- MD5 603c044db3df18a5c81ac3efc4767f0b
- SHA1 2cf8fc33a336f9779ee69300d0d8c72475e5c0bd
- SHA512 f53fdcc58cdc9ed119890a6694b5956162378315e7c977d3ae3b8ab1b40111586b257aa0d5d49e79fe423e0d7f823138c1ad2a85882565f20fe345a0ae1fb981
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRiA:RL+bxmc+kHfrx83SAA
- TLSH T19453F1A9A4948B3EE8D3FAB2DFB542709C3139FA4F8A42150F1D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1