General
- Target ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc
- Size 59KB
- Sample261017-bval8agv3x
- SHA256 ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc
- MD5 fcad26f751341e95a8bcd7f1dcd19895
- SHA1 ab1c3998f6a8b7de4644c1fb332b69cc7554cf0a
- SHA512 b277c30f9c73c138bd22c583c57108e2fb4c2432191c496738343f7e947a67e9503b9402d5ca8c41d49289e1e856862b285687d377ad6156c852c374b2dfe801
- SSDEEP 1536:GJsXcv+bxpkmitg1IxdsHfRhx83US4HRi5:GL+bxmc+kHfrx83SA5
- TLSH T1D953F1A598948F3EE8D3FAB29FB542709C3139FA4F8A42191F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc
- Size 59KB
- SHA256 ee51a0cc6c9b25a52484439aa98fbb4496f6760fbd1460d4214edc810ef72acc
- MD5 fcad26f751341e95a8bcd7f1dcd19895
- SHA1 ab1c3998f6a8b7de4644c1fb332b69cc7554cf0a
- SHA512 b277c30f9c73c138bd22c583c57108e2fb4c2432191c496738343f7e947a67e9503b9402d5ca8c41d49289e1e856862b285687d377ad6156c852c374b2dfe801
- SSDEEP 1536:GJsXcv+bxpkmitg1IxdsHfRhx83US4HRi5:GL+bxmc+kHfrx83SA5
- TLSH T1D953F1A598948F3EE8D3FAB29FB542709C3139FA4F8A42191F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1