General
- Target 6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997
- Size 59KB
- Sample261014-2cgwpattby
- SHA256 6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997
- MD5 ea288ac5afc019e0276b5fa4b70c5fcc
- SHA1 dd326566cb06a450b2e6e1cbdda6b11caf168da4
- SHA512 1cee670f4b8a1663441fc4e16109ef2e7f610ca360735c04f69a321f1520edd1e85f3eda0083ac51b67e1b13831518db134cac7dc229f3df7f5d9e6c35c8e1e5
- SSDEEP 1536:4JsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:4L+bxmc+kHfrx83SAz
- TLSH T1D053F1A9A4948F3EE8D7FAB2DFB542749C3539FA4F8A42150F1D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997
- Size 59KB
- SHA256 6483c3feefff3046c659cc7a98361f5909ffb60559227b7980302f3f05d3c997
- MD5 ea288ac5afc019e0276b5fa4b70c5fcc
- SHA1 dd326566cb06a450b2e6e1cbdda6b11caf168da4
- SHA512 1cee670f4b8a1663441fc4e16109ef2e7f610ca360735c04f69a321f1520edd1e85f3eda0083ac51b67e1b13831518db134cac7dc229f3df7f5d9e6c35c8e1e5
- SSDEEP 1536:4JsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:4L+bxmc+kHfrx83SAz
- TLSH T1D053F1A9A4948F3EE8D7FAB2DFB542749C3539FA4F8A42150F1D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1