General
- Target 5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794
- Size 59KB
- Sample261014-2fbtvab13x
- SHA256 5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794
- MD5 3bed1ddac55036727c60d1722211d92b
- SHA1 ce775bfa208d41121148060390e83433cb53e07c
- SHA512 4555fa08d9b65941d85f81135a00d85d877111adca53c4fe5d06ca3faf75f487db9f0d1820d07c384827156fdaccd51f2f5fea7243731d4c8adf1adccfbf5ad3
- SSDEEP 1536:kJsXcv+bxpkmitg1IxdsHfRhx83US4HRiR:kL+bxmc+kHfrx83SAR
- TLSH T15653F1A9A4948F3EE8D7FAB2DFB542749C3539FA4F4A42190F0D743E9769A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794
- Size 59KB
- SHA256 5cef489d7027ad52c800cd7af73409fafd70ce0f5d63959116cfb1c1fed4c794
- MD5 3bed1ddac55036727c60d1722211d92b
- SHA1 ce775bfa208d41121148060390e83433cb53e07c
- SHA512 4555fa08d9b65941d85f81135a00d85d877111adca53c4fe5d06ca3faf75f487db9f0d1820d07c384827156fdaccd51f2f5fea7243731d4c8adf1adccfbf5ad3
- SSDEEP 1536:kJsXcv+bxpkmitg1IxdsHfRhx83US4HRiR:kL+bxmc+kHfrx83SAR
- TLSH T15653F1A9A4948F3EE8D7FAB2DFB542749C3539FA4F4A42190F0D743E9769A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1