General
- Target 50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7
- Size 59KB
- Sample261014-2pbkfaad76
- SHA256 50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7
- MD5 ccd5c0a7ae49b39def38606c6d9c1993
- SHA1 95ba19941e14db6ac0dafcbdf6c64fa47284b517
- SHA512 5da3f50f1eb756e3a65032ca34db610053226be61dcdb366e3df8ef4df28db6e38be862b5b36573d489a2e1d43b351a4cc544f1f50a6987000fdbc3aee2eea02
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiK:LL+bxmc+kHfrx83SAK
- TLSH T16653F1A594948F3EE8D3FAB2DFB542709C3139FA4F9A42140F0D743E9B79A800A73251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7
- Size 59KB
- SHA256 50c72b4eb2e77afa12fbe3b9248e3319c7c7007a8b8da9c5f8d08c8a169546e7
- MD5 ccd5c0a7ae49b39def38606c6d9c1993
- SHA1 95ba19941e14db6ac0dafcbdf6c64fa47284b517
- SHA512 5da3f50f1eb756e3a65032ca34db610053226be61dcdb366e3df8ef4df28db6e38be862b5b36573d489a2e1d43b351a4cc544f1f50a6987000fdbc3aee2eea02
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiK:LL+bxmc+kHfrx83SAK
- TLSH T16653F1A594948F3EE8D3FAB2DFB542709C3139FA4F9A42140F0D743E9B79A800A73251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1