General
- Target e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d
- Size 228KB
- Sample261014-efsq2afs8t
- SHA256 e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d
- MD5 926836cc71c5edde891ae7d9199863bb
- SHA1 324085267f533a8a56a384b48f9e537aab254974
- SHA512 23e352d9c157dc9a352f55afeef7453b819c68ebaab61e057ba739d681fe52bf4e1083e8f4723c9892bd8040fe19afc858b89be64f104e247d4385afce8c4589
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnwd:6GzDegC51mszqUXfuTn4
- TLSH T10D342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d
- Size 228KB
- SHA256 e8ed59f546e01d5982ef3573f03bc9243bb0eee75ec379d7cf16f5b5ea56d94d
- MD5 926836cc71c5edde891ae7d9199863bb
- SHA1 324085267f533a8a56a384b48f9e537aab254974
- SHA512 23e352d9c157dc9a352f55afeef7453b819c68ebaab61e057ba739d681fe52bf4e1083e8f4723c9892bd8040fe19afc858b89be64f104e247d4385afce8c4589
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnwd:6GzDegC51mszqUXfuTn4
- TLSH T10D342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809395
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1