General
- Target a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229
- Size 135KB
- Sample261014-vf7sysft5p
- SHA256 a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229
- MD5 1ca3fdc178d46db0ca4058b792eec03f
- SHA1 2fd46bfced133d03aac7f2d517ba2f1096f9fca6
- SHA512 72504b7822585d570097ac270acec88d6bb76379974e4db5712f1881056d61462e2239988c77d7004974d01e7f0326ef4a5820fc0b923ec95682ccb05f69cb21
- SSDEEP 3072:kNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0Y:9qZ4h4fIqPWQd/4KUNNFT
- TLSH T122D32849EB8310F0FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229
- Size 135KB
- SHA256 a7b556d45c83f1f2488de1f2907e45b3946054193a6a65b00fa6c387722b5229
- MD5 1ca3fdc178d46db0ca4058b792eec03f
- SHA1 2fd46bfced133d03aac7f2d517ba2f1096f9fca6
- SHA512 72504b7822585d570097ac270acec88d6bb76379974e4db5712f1881056d61462e2239988c77d7004974d01e7f0326ef4a5820fc0b923ec95682ccb05f69cb21
- SSDEEP 3072:kNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0Y:9qZ4h4fIqPWQd/4KUNNFT
- TLSH T122D32849EB8310F0FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1