General
- Target 6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce
- Size 59KB
- Sample261013-2f7lhsvsgx
- SHA256 6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce
- MD5 b7056260a64043769e2d714f46b30aef
- SHA1 09fc5b43783b679e7fe881cfb251308ddb77f394
- SHA512 3f124dde210a50b9dc33c8f8965b251bbabad402bbd805625c8250bd2d5f5f07e99adb2f871d656662396bf325f9f0ba06f0f62cae670e912eae117b54411fa2
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiA:LL+bxmc+kHfrx83SAA
- TLSH T15253F1A594948F3EE8D3FAB29FB542709C3539FA4F8A42190F1D743E9B79AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce
- Size 59KB
- SHA256 6e70fdedd7ac78290801a88fa6db83235ae7eece5a8d4ebfd1537cbf3beaf9ce
- MD5 b7056260a64043769e2d714f46b30aef
- SHA1 09fc5b43783b679e7fe881cfb251308ddb77f394
- SHA512 3f124dde210a50b9dc33c8f8965b251bbabad402bbd805625c8250bd2d5f5f07e99adb2f871d656662396bf325f9f0ba06f0f62cae670e912eae117b54411fa2
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiA:LL+bxmc+kHfrx83SAA
- TLSH T15253F1A594948F3EE8D3FAB29FB542709C3539FA4F8A42190F1D743E9B79AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1