General
- Target 58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402
- Size 135KB
- Sample261017-a7926styay
- SHA256 58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402
- MD5 d264aaf3e49646dcb1822f6e03164ebe
- SHA1 7a8c93f22671f115d3182e03f3d54d2d1c4056cd
- SHA512 0da3dc04ac0bf552403d90e2dce24113078627893aee4d177e0af77b716e9511941fa60e9766f69813dbdf9ead1faa7498963cc5400b4b8b95b9c88633d4a53d
- SSDEEP 3072:fNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0F:WqZ4h4fIqPWQd/4KUNNF4
- TLSH T1B7D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402
- Size 135KB
- SHA256 58bf7852c5d7c77b078a9a6777618e36bda4d072a05861254f80e8e1b22c0402
- MD5 d264aaf3e49646dcb1822f6e03164ebe
- SHA1 7a8c93f22671f115d3182e03f3d54d2d1c4056cd
- SHA512 0da3dc04ac0bf552403d90e2dce24113078627893aee4d177e0af77b716e9511941fa60e9766f69813dbdf9ead1faa7498963cc5400b4b8b95b9c88633d4a53d
- SSDEEP 3072:fNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0F:WqZ4h4fIqPWQd/4KUNNF4
- TLSH T1B7D31849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1