General
- Target 729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed
- Size 135KB
- Sample261014-e4lbvsv16m
- SHA256 729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed
- MD5 f59301639ad29e049155b209eff08bce
- SHA1 c49798b5f968d1babee182d7612981889da82c5f
- SHA512 7dfd2ba5f14b5d1f496236b25a4e45d3a6a0007a70478f80bd8f3ceab019269551f8fecce501c5184b25c8b19c36f47d0331dd24f163b9f97c9c56789ea68470
- SSDEEP 3072:rNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F06:6qZ4h4fIqPWQd/4KUNNFl
- TLSH T1A2D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed
- Size 135KB
- SHA256 729ee8d2aa6babbf5545379bcaf3a111d706a1a14ad3fc4df1bb4d6f4e7e90ed
- MD5 f59301639ad29e049155b209eff08bce
- SHA1 c49798b5f968d1babee182d7612981889da82c5f
- SHA512 7dfd2ba5f14b5d1f496236b25a4e45d3a6a0007a70478f80bd8f3ceab019269551f8fecce501c5184b25c8b19c36f47d0331dd24f163b9f97c9c56789ea68470
- SSDEEP 3072:rNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F06:6qZ4h4fIqPWQd/4KUNNFl
- TLSH T1A2D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1