General
- Target 49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b
- Size 59KB
- Sample261014-2sd5qsaz7j
- SHA256 49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b
- MD5 69b46e30ef906acec91b0d2d55a74c12
- SHA1 e14c8ca6d6e2166061325311c1b582eef3c7317f
- SHA512 b4d98c8129dab1df8942b0b9bc2c9c7a74b42431755a3f0f4d47abad9965d1ba872635060cbf2feea07597387b872fec1a4b6e058d4129aaf11c3360548b6c84
- SSDEEP 1536:AJsXcv+bxpkmitg1IxdsHfRhx83US4HRi5:AL+bxmc+kHfrx83SA5
- TLSH T16F53F1A594948F3EE8D3FAF29FB542709C3539FA4F5A42190F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b
- Size 59KB
- SHA256 49ca2c6e3e3c9dc767eadbf115a99dfa19bbc3247f64d29b0f89fea74c17910b
- MD5 69b46e30ef906acec91b0d2d55a74c12
- SHA1 e14c8ca6d6e2166061325311c1b582eef3c7317f
- SHA512 b4d98c8129dab1df8942b0b9bc2c9c7a74b42431755a3f0f4d47abad9965d1ba872635060cbf2feea07597387b872fec1a4b6e058d4129aaf11c3360548b6c84
- SSDEEP 1536:AJsXcv+bxpkmitg1IxdsHfRhx83US4HRi5:AL+bxmc+kHfrx83SA5
- TLSH T16F53F1A594948F3EE8D3FAF29FB542709C3539FA4F5A42190F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1