General
- Target 384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281
- Size 171KB
- Sample261015-s2barsxzhx
- SHA256 384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281
- MD5 7d62c6e5a6e90b73f8760512e8e29a00
- SHA1 0262d3dcb20fbe18391e7b57d9b0ca7983d251b9
- SHA512 662d5a4e00ea87f131b9ec8028d7170b97bc85be88f318e820864275ecaf2bffba14ca366574e3104e7b6d48bf2c57a6bb14667713d14ac369de8affa9863610
- SSDEEP 3072:ONRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNkuh9JoL:TqZ4h4fIqPWQd/4KUNzhLoL
- TLSH T118043949EB8300F1FE6701B020AAE7FF5232B501D9398DA6D786CD96ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281
- Size 171KB
- SHA256 384fac15d5bf2f2d4822ddd634f71949b9da3b4dde37737a72e4d7bcff77f281
- MD5 7d62c6e5a6e90b73f8760512e8e29a00
- SHA1 0262d3dcb20fbe18391e7b57d9b0ca7983d251b9
- SHA512 662d5a4e00ea87f131b9ec8028d7170b97bc85be88f318e820864275ecaf2bffba14ca366574e3104e7b6d48bf2c57a6bb14667713d14ac369de8affa9863610
- SSDEEP 3072:ONRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNkuh9JoL:TqZ4h4fIqPWQd/4KUNzhLoL
- TLSH T118043949EB8300F1FE6701B020AAE7FF5232B501D9398DA6D786CD96ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1