General
- Target ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b
- Size 135KB
- Sample261014-d8ty5aec89
- SHA256 ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b
- MD5 c646bcfc773ba64c4e96fbc2eea28c0a
- SHA1 24a0b915fe4f8dd4046d799b21fa44f49baae2e4
- SHA512 27c990cbd24df5556067057758bcf9a76a2ab39dd5bed04f64f792e231d8d33724d331b8716af7b28f4a45fa9a453fba3d6f1e2a90cc802976498efb04665bbb
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0X:OqZ4h4fIqPWQd/4KUNNFa
- TLSH T174D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b
- Size 135KB
- SHA256 ed589c8c4130181c93bd3a2664d5a53250e460745be80bf362ef9837500cc95b
- MD5 c646bcfc773ba64c4e96fbc2eea28c0a
- SHA1 24a0b915fe4f8dd4046d799b21fa44f49baae2e4
- SHA512 27c990cbd24df5556067057758bcf9a76a2ab39dd5bed04f64f792e231d8d33724d331b8716af7b28f4a45fa9a453fba3d6f1e2a90cc802976498efb04665bbb
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0X:OqZ4h4fIqPWQd/4KUNNFa
- TLSH T174D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1