General
- Target b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78
- Size 228KB
- Sample261014-e5hx5ayvc1
- SHA256 b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78
- MD5 6583cffd8d8dfeaa2448bad697e5e3ba
- SHA1 fb941a471fe337e0959d975b4a54a0fdf7089312
- SHA512 35c9d90fe6bb408cd7914a19fb6b50d8799860094ba3b083c19c7ca48be3a456279143f53e94bad7db320e5e6030615219e1edccdf4f326c403655a14340e172
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnwU:6GzDegC51mszqUXfuTnB
- TLSH T17C342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78
- Size 228KB
- SHA256 b0ad6e1c71655b9f7f5a4d6589795ecd45cbafd8f77e9cd1cda46c7af487ae78
- MD5 6583cffd8d8dfeaa2448bad697e5e3ba
- SHA1 fb941a471fe337e0959d975b4a54a0fdf7089312
- SHA512 35c9d90fe6bb408cd7914a19fb6b50d8799860094ba3b083c19c7ca48be3a456279143f53e94bad7db320e5e6030615219e1edccdf4f326c403655a14340e172
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnwU:6GzDegC51mszqUXfuTnB
- TLSH T17C342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1