General
- Target 41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832
- Size 59KB
- Sample261014-w945lahf39
- SHA256 41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832
- MD5 e0a8814b5c1ef4b3ee2c5beda6cfbcce
- SHA1 119ea1802fc125e5c814b1a088493707fbc48427
- SHA512 842ed56d47b17ea35c54a6742a3a677adec31eb1ba0aacc67ce0d5c90e3fede5ee1149305c976210aa35a795dc1b6827d52a0ac2914e64d1b4e69cdf83061c57
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:RL+bxmc+kHfrx83SAc
- TLSH T16553F1A9A4948B3EE8D3FAB2DFB542749C3539FA4F9A42250F0D743E9769A800673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832
- Size 59KB
- SHA256 41d9db15c829fde2d51311fc031d54f23ba8ff66cd13b6caf8fe002bce5e2832
- MD5 e0a8814b5c1ef4b3ee2c5beda6cfbcce
- SHA1 119ea1802fc125e5c814b1a088493707fbc48427
- SHA512 842ed56d47b17ea35c54a6742a3a677adec31eb1ba0aacc67ce0d5c90e3fede5ee1149305c976210aa35a795dc1b6827d52a0ac2914e64d1b4e69cdf83061c57
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:RL+bxmc+kHfrx83SAc
- TLSH T16553F1A9A4948B3EE8D3FAB2DFB542749C3539FA4F9A42250F0D743E9769A800673141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1