General
- Target 68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9
- Size 135KB
- Sample261014-feptesws9k
- SHA256 68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9
- MD5 3bcefcc44a06423216fa879dce1a91e4
- SHA1 779a27b8a40bf0b0069631554d6b1f862e7c9425
- SHA512 98cff318b9bb3399eeff27546b1ab712d00d9cdcad846675dcbddb582918b60b5494149300920be11a5bb6436a9cf246eb96f784ef9ced9f594aca86dbd1bc07
- SSDEEP 3072:kNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0/:9qZ4h4fIqPWQd/4KUNNFk
- TLSH T171D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9
- Size 135KB
- SHA256 68943ce0155f5d3e848957c205a415199c638e17c8a4a06e22f08e79b618b9b9
- MD5 3bcefcc44a06423216fa879dce1a91e4
- SHA1 779a27b8a40bf0b0069631554d6b1f862e7c9425
- SHA512 98cff318b9bb3399eeff27546b1ab712d00d9cdcad846675dcbddb582918b60b5494149300920be11a5bb6436a9cf246eb96f784ef9ced9f594aca86dbd1bc07
- SSDEEP 3072:kNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0/:9qZ4h4fIqPWQd/4KUNNFk
- TLSH T171D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD46ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1