General
- Target 34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba
- Size 59KB
- Sample261017-b4pgqsce88
- SHA256 34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba
- MD5 bbe72812aedc7e18b7534575e56c842a
- SHA1 f059f4f5f9988e08bbd0c089aceec6d55fe7cc2f
- SHA512 96e0bfb897aba1d993c63ad174ce6188cb5ab50af58f7952edd5324ab5f5423a11ec8cde4830105739da79ff029ed24bc3acab455d69e4494860352f5bfe6348
- SSDEEP 1536:hJsXcv+bxpkmitg1IxdsHfRhx83US4HRis:hL+bxmc+kHfrx83SAs
- TLSH T19453F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F8A42190F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba
- Size 59KB
- SHA256 34ec44f50d667f2a0648618e0c02503be3a27a27af09e336e41d04aef0e013ba
- MD5 bbe72812aedc7e18b7534575e56c842a
- SHA1 f059f4f5f9988e08bbd0c089aceec6d55fe7cc2f
- SHA512 96e0bfb897aba1d993c63ad174ce6188cb5ab50af58f7952edd5324ab5f5423a11ec8cde4830105739da79ff029ed24bc3acab455d69e4494860352f5bfe6348
- SSDEEP 1536:hJsXcv+bxpkmitg1IxdsHfRhx83US4HRis:hL+bxmc+kHfrx83SAs
- TLSH T19453F1A5A4948F3EE8D3FAB2DFB542709C3539FA4F8A42190F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1