General
- Target 2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25
- Size 135KB
- Sample261014-s7wtnavs5p
- SHA256 2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25
- MD5 48ddf31a658b64e55332e8988e723922
- SHA1 4dfd8aae86b3b7c4a31277d25ed9d94f8f715ec3
- SHA512 7cef738d3f9a2c513a92fb5e7e6ee45560271e4843a2c117ee4d6de2560f411ffa71c4f6a17e9beb00d1a07f2be396574420062d32a3c3d0a9f5af4e5074a06a
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0t:gqZ4h4fIqPWQd/4KUNNFk
- TLSH T18AD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25
- Size 135KB
- SHA256 2b64b1c16922a0ded3324677af91feee690ee6545b5cc64af7ada25ee434bc25
- MD5 48ddf31a658b64e55332e8988e723922
- SHA1 4dfd8aae86b3b7c4a31277d25ed9d94f8f715ec3
- SHA512 7cef738d3f9a2c513a92fb5e7e6ee45560271e4843a2c117ee4d6de2560f411ffa71c4f6a17e9beb00d1a07f2be396574420062d32a3c3d0a9f5af4e5074a06a
- SSDEEP 3072:1NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0t:gqZ4h4fIqPWQd/4KUNNFk
- TLSH T18AD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1