General
- Target 6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5
- Size 59KB
- Sample261013-2nb5ks115q
- SHA256 6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5
- MD5 8c6ce878159e723ff276515dcc1d80d7
- SHA1 7bb6b36084855e5bbcaa168a6dc6addf5c432c02
- SHA512 476557e87795900fbac7c2ae8afb075d3e61879e7786be0384cad93ccbdf409cd1bea73d94311e5cafdaa0ddda986807501c0475ba8ac6cd9a0b1fe72da14bfd
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiO:LL+bxmc+kHfrx83SAO
- TLSH T11E53F1A9A4948F3EE8D3FAB2DFB542749C3539FA4F9A42150F0D743E9739A800673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5
- Size 59KB
- SHA256 6397ae5dbde075613b64c29cdf5703a88fe50d01a2b932c36affc97914465fb5
- MD5 8c6ce878159e723ff276515dcc1d80d7
- SHA1 7bb6b36084855e5bbcaa168a6dc6addf5c432c02
- SHA512 476557e87795900fbac7c2ae8afb075d3e61879e7786be0384cad93ccbdf409cd1bea73d94311e5cafdaa0ddda986807501c0475ba8ac6cd9a0b1fe72da14bfd
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiO:LL+bxmc+kHfrx83SAO
- TLSH T11E53F1A9A4948F3EE8D3FAB2DFB542749C3539FA4F9A42150F0D743E9739A800673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1