General
- Target e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee
- Size 59KB
- Sample261017-c7cssagt8k
- SHA256 e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee
- MD5 525208dd26958da43d3fc2735c1f657f
- SHA1 dbc85fe95f8e7cde05f969616075f8074440d91c
- SHA512 73e5e1f7db2506b3307dcfa82dfa7304c5b7cc6a6a8117da13ee83af7d4758260ca198aeb9574b3ae72e0713c56ced996b1867f4d54714010ab6d998021ef08c
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiY:ZL+bxmc+kHfrx83SAY
- TLSH T14653F1A994948F3EE8D7FAB29FB542745C3139FA4F8A42190F0D743E9B79AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee
- Size 59KB
- SHA256 e4e0b37ce97c9383e37470a22a01be41a49454b5ebc82770ae60033d456b6dee
- MD5 525208dd26958da43d3fc2735c1f657f
- SHA1 dbc85fe95f8e7cde05f969616075f8074440d91c
- SHA512 73e5e1f7db2506b3307dcfa82dfa7304c5b7cc6a6a8117da13ee83af7d4758260ca198aeb9574b3ae72e0713c56ced996b1867f4d54714010ab6d998021ef08c
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiY:ZL+bxmc+kHfrx83SAY
- TLSH T14653F1A994948F3EE8D7FAB29FB542745C3139FA4F8A42190F0D743E9B79AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1