General
- Target 2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7
- Size 59KB
- Sample261017-ak2ghscc37
- SHA256 2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7
- MD5 a2839b1c559fcb7fb19f1b939d84975a
- SHA1 719d485b5d0adff1ad768e640dbe61579bacd8c9
- SHA512 e3d2b441aa417b9ac6d0dd0576cd44716298f88a7cd057b165a05a079ae158599bed407a32d5020a16815877046c65ba6e10b9be3f1fb060a3217a537c5a7474
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiP:LL+bxmc+kHfrx83SAP
- TLSH T14153F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F5A42150F0D743E9B79A800673251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7
- Size 59KB
- SHA256 2b63452cb3f19aa8dd6775cd89545bedceabdc2a02223a090300c48dc613f1f7
- MD5 a2839b1c559fcb7fb19f1b939d84975a
- SHA1 719d485b5d0adff1ad768e640dbe61579bacd8c9
- SHA512 e3d2b441aa417b9ac6d0dd0576cd44716298f88a7cd057b165a05a079ae158599bed407a32d5020a16815877046c65ba6e10b9be3f1fb060a3217a537c5a7474
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRiP:LL+bxmc+kHfrx83SAP
- TLSH T14153F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F5A42150F0D743E9B79A800673251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1