General
- Target 642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23
- Size 59KB
- Sample261013-2mtcgacv71
- SHA256 642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23
- MD5 5ceaabc74006f8b4ad85da95fc79612b
- SHA1 30820dcbf1c7d9242d1acbaa15aafedf75cb630e
- SHA512 2fa2de3d8d5b9394ff24785f0d08a1bedea6958bd7a39f2cde42a48fa6ce4649d7830d65128565d63f80b2517c0a1dfe764fade36b5ef4d4b2c66a3db278945b
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiiP:ZL+bxmc+kHfrx83SAiP
- TLSH T16D53F1A594948F3EE8D7FAB29FB542749C3539FA4F8A42150F1D743E9B39A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23
- Size 59KB
- SHA256 642cf6a8cece4c18a3fcd5280eacf52e9de2f1282b880361482af6c802681d23
- MD5 5ceaabc74006f8b4ad85da95fc79612b
- SHA1 30820dcbf1c7d9242d1acbaa15aafedf75cb630e
- SHA512 2fa2de3d8d5b9394ff24785f0d08a1bedea6958bd7a39f2cde42a48fa6ce4649d7830d65128565d63f80b2517c0a1dfe764fade36b5ef4d4b2c66a3db278945b
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiiP:ZL+bxmc+kHfrx83SAiP
- TLSH T16D53F1A594948F3EE8D7FAB29FB542749C3539FA4F8A42150F1D743E9B39A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1