General
- Target 10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91
- Size 135KB
- Sample261014-d41acae12z
- SHA256 10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91
- MD5 5710f78e3c356ff6d118dc5674f8fca9
- SHA1 df540f37ddce78b73e4ec81c25ffe4cf77e4c249
- SHA512 76cef96c33c33dd190318d42dfaae6aa7bb3837ebc94d08c9a3d433377f1cb0552b3aa2250b80d781ae331c2a5a0598499261219d9091e622aee25aae838b30f
- SSDEEP 3072:FNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0x:wqZ4h4fIqPWQd/4KUNNFy
- TLSH T10BD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91
- Size 135KB
- SHA256 10cc9ecec5cf80d5ce36095cd4014b95664fc92da8a5327a0a7dbbe3e0e65e91
- MD5 5710f78e3c356ff6d118dc5674f8fca9
- SHA1 df540f37ddce78b73e4ec81c25ffe4cf77e4c249
- SHA512 76cef96c33c33dd190318d42dfaae6aa7bb3837ebc94d08c9a3d433377f1cb0552b3aa2250b80d781ae331c2a5a0598499261219d9091e622aee25aae838b30f
- SSDEEP 3072:FNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0x:wqZ4h4fIqPWQd/4KUNNFy
- TLSH T10BD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1