General
- Target 900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8
- Size 59KB
- Sample261014-1glvrssxes
- SHA256 900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8
- MD5 bc84b71773321f3d12b5ba9093dc14a8
- SHA1 a2bd8c807b1556565b090da0121a411e872771f3
- SHA512 eca0a458a0276f0e0b019ac6e8c96fbfc2922149e30b5afae1ebe4e17e4df5869a05ce165356907fdb58d3088c9db0e37d9cf0eafed10d7317e3950930f6c628
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRie:RL+bxmc+kHfrx83SAe
- TLSH T1C153F1A5A4948B3EE8D7FAB2DFB542709C3139FA4F4A42151F1D743E9B79AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8
- Size 59KB
- SHA256 900b4e7ba433542664222cc39190417ce0d9dd2cfabf04e482a279dcf2388de8
- MD5 bc84b71773321f3d12b5ba9093dc14a8
- SHA1 a2bd8c807b1556565b090da0121a411e872771f3
- SHA512 eca0a458a0276f0e0b019ac6e8c96fbfc2922149e30b5afae1ebe4e17e4df5869a05ce165356907fdb58d3088c9db0e37d9cf0eafed10d7317e3950930f6c628
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRie:RL+bxmc+kHfrx83SAe
- TLSH T1C153F1A5A4948B3EE8D7FAB2DFB542709C3139FA4F4A42151F1D743E9B79AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1