General
- Target 59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591
- Size 59KB
- Sample261014-2jae7azz6p
- SHA256 59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591
- MD5 1e14ee310bca734b0542d32ad2d02a4d
- SHA1 6a661f7f9651c3a9a23b7bbf184d53bf17685434
- SHA512 9a2913272b7701ecbdf5fd226d633e19e89d28ec53c5d49b7e551f6dc8d2c41ff4641306d6d3b139e1dd27b0b736395e9d7fda46c9efb8e426f20e5de4ac17a7
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRiJ:HL+bxmc+kHfrx83SAJ
- TLSH T1A953F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F9A42191F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591
- Size 59KB
- SHA256 59f2bd5201c135877b4002438062d5dea2ca2cf0ad06204c2fa5a06000a38591
- MD5 1e14ee310bca734b0542d32ad2d02a4d
- SHA1 6a661f7f9651c3a9a23b7bbf184d53bf17685434
- SHA512 9a2913272b7701ecbdf5fd226d633e19e89d28ec53c5d49b7e551f6dc8d2c41ff4641306d6d3b139e1dd27b0b736395e9d7fda46c9efb8e426f20e5de4ac17a7
- SSDEEP 1536:HJsXcv+bxpkmitg1IxdsHfRhx83US4HRiJ:HL+bxmc+kHfrx83SAJ
- TLSH T1A953F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F9A42191F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1