General
- Target 1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e
- Size 59KB
- Sample261017-dfe99sgw2m
- SHA256 1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e
- MD5 6de0130174f1a9b8b7d8203375221cc5
- SHA1 b10efd30c92a1a3ab6a2805e252d42ba0287a8bd
- SHA512 372d065bb2a3f77fbbeb8cd61445aeb1b02233df7097d3fb63e31e4d028bc65f565be5870a56d4c76a886313be51e8c876b1bad441a274ea872c0dcd249c926b
- SSDEEP 1536:jJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:jL+bxmc+kHfrx83SAE
- TLSH T1D653F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F5A42190F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e.exe
Resource
win10v2004-20260911-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e
- Size 59KB
- SHA256 1a1cd6ad802027d77e90ae6f5338625bed995a9ec0015cafd8d75d46c14d1b2e
- MD5 6de0130174f1a9b8b7d8203375221cc5
- SHA1 b10efd30c92a1a3ab6a2805e252d42ba0287a8bd
- SHA512 372d065bb2a3f77fbbeb8cd61445aeb1b02233df7097d3fb63e31e4d028bc65f565be5870a56d4c76a886313be51e8c876b1bad441a274ea872c0dcd249c926b
- SSDEEP 1536:jJsXcv+bxpkmitg1IxdsHfRhx83US4HRiE:jL+bxmc+kHfrx83SAE
- TLSH T1D653F1A5A4948F3EE8D7FAB2DFB542709C3539FA4F5A42190F0D743E9779A800A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1