General
- Target 8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11
- Size 59KB
- Sample261014-1jsfbsac27
- SHA256 8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11
- MD5 9cc570a9b5604636ce6354defaf440e6
- SHA1 d9f4bb30d6db3798c1600c32993582940df80456
- SHA512 f44cb72f63062e71bed1905d5ef4dc2cf601446673b3d02ad7705e61082ee51a5d5f6c52667a7bbf8492ff9a422a1102e532014de901421f82325db287dcdc0e
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRij:HL+bxmc+kHfrx83SAj
- TLSH T1A053F2A5A4948F3EE8D7FAB2DFB542749C3539FA4F8A42151F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11
- Size 59KB
- SHA256 8b6759d397ce1dc6eab98b589c2240f930a8ba7395a5cc932c7ea83fc04d3c11
- MD5 9cc570a9b5604636ce6354defaf440e6
- SHA1 d9f4bb30d6db3798c1600c32993582940df80456
- SHA512 f44cb72f63062e71bed1905d5ef4dc2cf601446673b3d02ad7705e61082ee51a5d5f6c52667a7bbf8492ff9a422a1102e532014de901421f82325db287dcdc0e
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRij:HL+bxmc+kHfrx83SAj
- TLSH T1A053F2A5A4948F3EE8D7FAB2DFB542749C3539FA4F8A42151F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1