General
- Target 995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b
- Size 135KB
- Sample261014-efty4afs8w
- SHA256 995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b
- MD5 f83b1b88c208c53b9edc6bfb01e2bfe1
- SHA1 66f84309f8f6ba31516f6f43025099dc7c2fd900
- SHA512 1da4bd1bba54e06c6ea1d5bccb5fd028eb4e7b0116582aad926bb15bdf050cf00f70d85ba23d691252c8f2ef76df3a19a7340eb1495431715bd4e282cdf10f82
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0j:5qZ4h4fIqPWQd/4KUNNFY
- TLSH T1E6D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b
- Size 135KB
- SHA256 995c535d7d4478c4c1d0a83e5b735bea39ff24d6d772bf077bcca50cfe5b590b
- MD5 f83b1b88c208c53b9edc6bfb01e2bfe1
- SHA1 66f84309f8f6ba31516f6f43025099dc7c2fd900
- SHA512 1da4bd1bba54e06c6ea1d5bccb5fd028eb4e7b0116582aad926bb15bdf050cf00f70d85ba23d691252c8f2ef76df3a19a7340eb1495431715bd4e282cdf10f82
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0j:5qZ4h4fIqPWQd/4KUNNFY
- TLSH T1E6D32849EB8310F1FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1