General
- Target 7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13
- Size 59KB
- Sample261013-2datrs1z2n
- SHA256 7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13
- MD5 b07cef5e61cb7ce8c1fc651d3cdfd786
- SHA1 6365314b1d7c0002d73d33c49c7d9f2c605272a1
- SHA512 63011297d4a6122d05140ca55afa2ad5f7e43912cb4e38ed28620ece987936f1128d3c20cc51bc57a80a8a7dc236b2b09f688c24a5ec9e982f963b1ccaae44d0
- SSDEEP 1536:eJsXcv+bxpkmitg1IxdsHfRhx83US4HRir:eL+bxmc+kHfrx83SAr
- TLSH T15353F1A5A4948F3EE8D3FAB29FB542709C3539FA4F5A42191F1D743E9779AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13
- Size 59KB
- SHA256 7400aff230e567dd602eb81f5ce6cc22c7cf4fb76b0423e3168bd91ba80fac13
- MD5 b07cef5e61cb7ce8c1fc651d3cdfd786
- SHA1 6365314b1d7c0002d73d33c49c7d9f2c605272a1
- SHA512 63011297d4a6122d05140ca55afa2ad5f7e43912cb4e38ed28620ece987936f1128d3c20cc51bc57a80a8a7dc236b2b09f688c24a5ec9e982f963b1ccaae44d0
- SSDEEP 1536:eJsXcv+bxpkmitg1IxdsHfRhx83US4HRir:eL+bxmc+kHfrx83SAr
- TLSH T15353F1A5A4948F3EE8D3FAB29FB542709C3539FA4F5A42191F1D743E9779AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1