General
- Target 91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009
- Size 135KB
- Sample261014-e3x92af18m
- SHA256 91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009
- MD5 5f2895e3a86215bff2357d7f98f5e322
- SHA1 36615a91047bffb51ad2d6f8c5f797a3eed5d98e
- SHA512 cfb922ee86a6b9575872f8eb7396f4ea23242a94f8bba2e44ed6aeed95b1fb799874793c55533f70ed2f3d6cb0e991cfeee72ba9d63b0eee93926199a833830a
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F02:4qZ4h4fIqPWQd/4KUNNFP
- TLSH T153D32849EB8310F1FE6701B010AAEBFF5236B501D93A8DA6D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009
- Size 135KB
- SHA256 91c96726bb12b3f912d688194d9d84059428a35351e328499cf8526338f1e009
- MD5 5f2895e3a86215bff2357d7f98f5e322
- SHA1 36615a91047bffb51ad2d6f8c5f797a3eed5d98e
- SHA512 cfb922ee86a6b9575872f8eb7396f4ea23242a94f8bba2e44ed6aeed95b1fb799874793c55533f70ed2f3d6cb0e991cfeee72ba9d63b0eee93926199a833830a
- SSDEEP 3072:dNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F02:4qZ4h4fIqPWQd/4KUNNFP
- TLSH T153D32849EB8310F1FE6701B010AAEBFF5236B501D93A8DA6D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1