General
- Target da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8
- Size 135KB
- Sample261014-e7lrssws2j
- SHA256 da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8
- MD5 0f352473f68ceb048cc34efbc0372032
- SHA1 340994e0766ab8ac0e70b57b870d6cea65a9953a
- SHA512 89fb906a219eee2c376d9010b83363a5db0c5203d2c8d5c9ae105d9ce7a730bb9e50da5bf84395b5cf5a0d3a2e0666bfb4ccfdd893d0d03c9a5f4517039c832f
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0j:gqZ4h4fIqPWQd/4KUNNF6
- TLSH T188D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8
- Size 135KB
- SHA256 da3bdfc484faa3ec8158c632ea98be2a5f42620dea9307385f61105707c8b6a8
- MD5 0f352473f68ceb048cc34efbc0372032
- SHA1 340994e0766ab8ac0e70b57b870d6cea65a9953a
- SHA512 89fb906a219eee2c376d9010b83363a5db0c5203d2c8d5c9ae105d9ce7a730bb9e50da5bf84395b5cf5a0d3a2e0666bfb4ccfdd893d0d03c9a5f4517039c832f
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0j:gqZ4h4fIqPWQd/4KUNNF6
- TLSH T188D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1