General
- Target 0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8
- Size 135KB
- Sample261014-e3q6qafw5x
- SHA256 0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8
- MD5 0642d5ce97db30dca1607e6d38f77397
- SHA1 d54391b995add421c857f45d34e43aca4945fafe
- SHA512 0b09dec429e27b5d8ba4ec5f9bbe354e8f8eb84d70bfff3d2b1bb9a3eddb32380274211b38337568319472684d924189bf9bfb30a2cbafcba06fa106ed8ffba8
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0f:5qZ4h4fIqPWQd/4KUNNFw
- TLSH T1F5D31849EB8310F1FE6701B020AAEBFF4236B511D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8
- Size 135KB
- SHA256 0cefe904221e418e2461d003a1f4293a3b4fa72f5a5f01aa856983ceecff82b8
- MD5 0642d5ce97db30dca1607e6d38f77397
- SHA1 d54391b995add421c857f45d34e43aca4945fafe
- SHA512 0b09dec429e27b5d8ba4ec5f9bbe354e8f8eb84d70bfff3d2b1bb9a3eddb32380274211b38337568319472684d924189bf9bfb30a2cbafcba06fa106ed8ffba8
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0f:5qZ4h4fIqPWQd/4KUNNFw
- TLSH T1F5D31849EB8310F1FE6701B020AAEBFF4236B511D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1