General
- Target e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168
- Size 135KB
- Sample261014-e1rdpsytgy
- SHA256 e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168
- MD5 8e36c2faa15063ddeab49c66170fef6a
- SHA1 0b9ffbae5de86715f16ea9487368300d5ac14602
- SHA512 23573a70c75eb95b4cc0e2c46d2a39f37bbfc437c6f69180ac83201821c3b37154d6345f2268c674d2a6c984285de1f646aae63e7a378aa86f53002ad94c1bec
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0l:OqZ4h4fIqPWQd/4KUNNFM
- TLSH T1A1D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168
- Size 135KB
- SHA256 e81e0eed9fc64c37c10026c0873eaabe4e8e9c00597dad0b3732973219b3d168
- MD5 8e36c2faa15063ddeab49c66170fef6a
- SHA1 0b9ffbae5de86715f16ea9487368300d5ac14602
- SHA512 23573a70c75eb95b4cc0e2c46d2a39f37bbfc437c6f69180ac83201821c3b37154d6345f2268c674d2a6c984285de1f646aae63e7a378aa86f53002ad94c1bec
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0l:OqZ4h4fIqPWQd/4KUNNFM
- TLSH T1A1D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1