General
- Target 8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a
- Size 135KB
- Sample261017-a684gscd76
- SHA256 8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a
- MD5 4cc4574ee64376ae5b8b6dd37275884c
- SHA1 35ebf1d02646fe7d11b4f5d24c757f04cccacab7
- SHA512 f2d41500f74edc452d31b3f0a638c99ff4a327d208e88cc7e3a1177277481d5c4ac1dd84c89e7abe0a46d349313d72710f60bd0de8b42d087195b2428c8ffa4b
- SSDEEP 3072:MNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0y:1qZ4h4fIqPWQd/4KUNNFF
- TLSH T1ADD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a
- Size 135KB
- SHA256 8990cc2055c902ecbcefc3adc01caac352a4ca60d2bf92a370ffcce8e03d4d3a
- MD5 4cc4574ee64376ae5b8b6dd37275884c
- SHA1 35ebf1d02646fe7d11b4f5d24c757f04cccacab7
- SHA512 f2d41500f74edc452d31b3f0a638c99ff4a327d208e88cc7e3a1177277481d5c4ac1dd84c89e7abe0a46d349313d72710f60bd0de8b42d087195b2428c8ffa4b
- SSDEEP 3072:MNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0y:1qZ4h4fIqPWQd/4KUNNFF
- TLSH T1ADD31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1