General
- Target 2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8
- Size 59KB
- Sample261015-ykrjbaws7m
- SHA256 2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8
- MD5 c0aea8b7939866e852f71b14bab71276
- SHA1 f6927f31b1d63ad0ef97ced40a0afa734c4690a8
- SHA512 139538ee9ff42336c5423c0f80dff9291dca0363c4d7e1acce21c3ab9041f2e089c6a54e83778a5bd2d541b0ce6f6898da8181552d9e04f75e6f4adb4f7786ac
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRib:NL+bxmc+kHfrx83SAb
- TLSH T1E153F1A5A4948F3EE8D3FAB2DFB542749C3539FA4F5A42190F1D743E9729AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8
- Size 59KB
- SHA256 2b763085a22549d50e29ddaac0c222043a6baa32df984665310500fd1d1945f8
- MD5 c0aea8b7939866e852f71b14bab71276
- SHA1 f6927f31b1d63ad0ef97ced40a0afa734c4690a8
- SHA512 139538ee9ff42336c5423c0f80dff9291dca0363c4d7e1acce21c3ab9041f2e089c6a54e83778a5bd2d541b0ce6f6898da8181552d9e04f75e6f4adb4f7786ac
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRib:NL+bxmc+kHfrx83SAb
- TLSH T1E153F1A5A4948F3EE8D3FAB2DFB542749C3539FA4F5A42190F1D743E9729AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1