General
- Target a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480
- Size 135KB
- Sample261014-gm5ehsgz5j
- SHA256 a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480
- MD5 c2d42b880e6c18b21a036aa099e400a7
- SHA1 44edd24b58a49b75ae0ac463edf9ea393b97730d
- SHA512 18dcd006073d0e8db71053f6055f6d2a6df3b23bbc3bd20617d00d3221e0dbcf6443a6a171a2420cbb4b31dc3f611e6775eb18deb5c17c9b81b7110a35091629
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0Y:gqZ4h4fIqPWQd/4KUNNFh
- TLSH T156D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480
- Size 135KB
- SHA256 a3ed84fb2e0994d5257441eb2bcf898da80bedad247b3337f7cee41a8933d480
- MD5 c2d42b880e6c18b21a036aa099e400a7
- SHA1 44edd24b58a49b75ae0ac463edf9ea393b97730d
- SHA512 18dcd006073d0e8db71053f6055f6d2a6df3b23bbc3bd20617d00d3221e0dbcf6443a6a171a2420cbb4b31dc3f611e6775eb18deb5c17c9b81b7110a35091629
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0Y:gqZ4h4fIqPWQd/4KUNNFh
- TLSH T156D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1