General
- Target 3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de
- Size 59KB
- Sample261014-xdzexazzct
- SHA256 3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de
- MD5 0588d7e66aee18fd1efea6af24917f38
- SHA1 55cd303e76636f4cfe47039dcbef60ee84a5e3e5
- SHA512 c2cb7a0cc544bbff08f665d978e24fc6548c39ed26cbed65e020fcb1991258dbd4a457d487208af55fed9f169f1a275ec50ab2500a77c8cf2bd6b5f69461b8ad
- SSDEEP 1536:QJsXcv+bxpkmitg1IxdsHfRhx83US4HRiD:QL+bxmc+kHfrx83SAD
- TLSH T12753F1A9A4948F3EE8D7FAB29FB542749C3539FA4F5A42151F0D743E9729AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de
- Size 59KB
- SHA256 3c0ac3db54a5c24a8cdf080eeb69c3ea038c50d10a32fa37fb6111cd3e1e63de
- MD5 0588d7e66aee18fd1efea6af24917f38
- SHA1 55cd303e76636f4cfe47039dcbef60ee84a5e3e5
- SHA512 c2cb7a0cc544bbff08f665d978e24fc6548c39ed26cbed65e020fcb1991258dbd4a457d487208af55fed9f169f1a275ec50ab2500a77c8cf2bd6b5f69461b8ad
- SSDEEP 1536:QJsXcv+bxpkmitg1IxdsHfRhx83US4HRiD:QL+bxmc+kHfrx83SAD
- TLSH T12753F1A9A4948F3EE8D7FAB29FB542749C3539FA4F5A42151F0D743E9729AC00A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1