General
- Target f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45
- Size 59KB
- Sample261017-a2yrystxcx
- SHA256 f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45
- MD5 dcf47b890a8c68b085c940c4b27c14fd
- SHA1 182fdf190c094e5f0b63f944c05150204fcb9446
- SHA512 19cec5257f2681cf1dc6147e7077cd3807b07195f0ec8750bfad369b9e190a4146f2f47bb3bf1cfbb52fb7d8e20ad9e7ea1cd2715f7509de5907ddb22f809a2e
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRi/:LL+bxmc+kHfrx83SA/
- TLSH T10453F1A5A4948B3EE8D3FAB2DFB542709C3539FA4F5A42150F0D743E9B79A800673251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45
- Size 59KB
- SHA256 f2a7da0e74d092bc7e34f96a5b2ed5e947d46922ee064c130f9e04bc71793c45
- MD5 dcf47b890a8c68b085c940c4b27c14fd
- SHA1 182fdf190c094e5f0b63f944c05150204fcb9446
- SHA512 19cec5257f2681cf1dc6147e7077cd3807b07195f0ec8750bfad369b9e190a4146f2f47bb3bf1cfbb52fb7d8e20ad9e7ea1cd2715f7509de5907ddb22f809a2e
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRi/:LL+bxmc+kHfrx83SA/
- TLSH T10453F1A5A4948B3EE8D3FAB2DFB542709C3539FA4F5A42150F0D743E9B79A800673251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1