General
- Target e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36
- Size 135KB
- Sample261014-s2ctlaez9t
- SHA256 e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36
- MD5 b1a15144a304c8570b80ae68da023876
- SHA1 8f4a9cdce9370165703d7b84323788f68c31b89c
- SHA512 4eb4ec0b01c3fbd56308b763779677a3779a7072ce78eadf6bac34841d17d26dd8a166888070ad0595174a683cc731f02dd3fe822ff3ad1f43eb8c565e997ecd
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0+:OqZ4h4fIqPWQd/4KUNNFf
- TLSH T113D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36
- Size 135KB
- SHA256 e48267b839d261ed5757b333fa351ae6ad014f3d1a76c8d21af83dd12fb80d36
- MD5 b1a15144a304c8570b80ae68da023876
- SHA1 8f4a9cdce9370165703d7b84323788f68c31b89c
- SHA512 4eb4ec0b01c3fbd56308b763779677a3779a7072ce78eadf6bac34841d17d26dd8a166888070ad0595174a683cc731f02dd3fe822ff3ad1f43eb8c565e997ecd
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0+:OqZ4h4fIqPWQd/4KUNNFf
- TLSH T113D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1