General
- Target 4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68
- Size 135KB
- Sample261016-1cldfaxt6r
- SHA256 4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68
- MD5 d6195dfa2b7330f5884333ddecbc6dbb
- SHA1 d41199f1d31395f8938f5b314f500d45bad3ee27
- SHA512 f47ec5f87ffeb367fe6f8f85bd02bb0837e39f27e69f2d7a29e58b84910166ca44e2ce9e8a8103e9b5ef8f1aaf7a37c6b66395e80d84660eb0855b7fd92292ad
- SSDEEP 3072:NNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0F:oqZ4h4fIqPWQd/4KUNNFi
- TLSH T1E5D31849EB8310F1FE6301B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68
- Size 135KB
- SHA256 4ae1453df00162390c6e8c55f5440656415d7f0f08a221265c24b63e6ee8cb68
- MD5 d6195dfa2b7330f5884333ddecbc6dbb
- SHA1 d41199f1d31395f8938f5b314f500d45bad3ee27
- SHA512 f47ec5f87ffeb367fe6f8f85bd02bb0837e39f27e69f2d7a29e58b84910166ca44e2ce9e8a8103e9b5ef8f1aaf7a37c6b66395e80d84660eb0855b7fd92292ad
- SSDEEP 3072:NNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0F:oqZ4h4fIqPWQd/4KUNNFi
- TLSH T1E5D31849EB8310F1FE6301B010AAEBFF5236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1