General
- Target ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055
- Size 135KB
- Sample261014-e5g1tsv17q
- SHA256 ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055
- MD5 a85e9219839d497a687dd35c3a278f39
- SHA1 147a07d9a8b8ed6669d53e553f51e5629418a27d
- SHA512 9d87733ba6590f1f0b8d7eae2b9aab56a59281460d6b2ba8d5506ecd4f8be1ee5ed5b3faf403f0c472afa6ec8357448abe9388ef3eab5ba997a90d1003742775
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F00:5qZ4h4fIqPWQd/4KUNNF1
- TLSH T1D4D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055
- Size 135KB
- SHA256 ab6194c22ea9b594e848d8cdba61dd1a4e8c379eb3644f307781557aa4552055
- MD5 a85e9219839d497a687dd35c3a278f39
- SHA1 147a07d9a8b8ed6669d53e553f51e5629418a27d
- SHA512 9d87733ba6590f1f0b8d7eae2b9aab56a59281460d6b2ba8d5506ecd4f8be1ee5ed5b3faf403f0c472afa6ec8357448abe9388ef3eab5ba997a90d1003742775
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F00:5qZ4h4fIqPWQd/4KUNNF1
- TLSH T1D4D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1