General
- Target 1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51
- Size 59KB
- Sample261014-x4cc3axy8p
- SHA256 1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51
- MD5 8d483734030bd5c917209221dbff6e82
- SHA1 a829d08f261e4fad035ce90002a3990c09edc34c
- SHA512 198075f674cf0a7f3d7cf1c1ef1faecd1a598099a1e4868393f60069d92112e31dac0b8a28c4dfefd8e0c601c72a10b79107baf35a9f13df1368d274e09d1b7c
- SSDEEP 1536:AJsXcv+bxpkmitg1IxdsHfRhx83US4HRiB:AL+bxmc+kHfrx83SAB
- TLSH T18753F1A594948F3EE8D3FAB2DFB542749C3539FA4F9A42150F0D743E9779A800673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51
- Size 59KB
- SHA256 1141ecc6a6e9886924d6bd24bb7e1f9b224d84eb99c8b48505e45ab75ed44a51
- MD5 8d483734030bd5c917209221dbff6e82
- SHA1 a829d08f261e4fad035ce90002a3990c09edc34c
- SHA512 198075f674cf0a7f3d7cf1c1ef1faecd1a598099a1e4868393f60069d92112e31dac0b8a28c4dfefd8e0c601c72a10b79107baf35a9f13df1368d274e09d1b7c
- SSDEEP 1536:AJsXcv+bxpkmitg1IxdsHfRhx83US4HRiB:AL+bxmc+kHfrx83SAB
- TLSH T18753F1A594948F3EE8D3FAB2DFB542749C3539FA4F9A42150F0D743E9779A800673101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1