General
- Target 55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c
- Size 135KB
- Sample261017-e2bdwawygs
- SHA256 55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c
- MD5 47ed4bcdfc89e49ecd08e0e8923b3b23
- SHA1 1b577687fd89ff0f8c7e1bc41eae078552169692
- SHA512 d252fcb6d78385045f552def433c4d5be5f31e7e0a55c7dcb09dc73697cb74f78f50ee1db5246922f720a9bb2679d86ff636530774b6eaf1b1e9136a4262c6fe
- SSDEEP 3072:2NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0T:rqZ4h4fIqPWQd/4KUNNFg
- TLSH T1B3D32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c
- Size 135KB
- SHA256 55838c670b754ff76b50c928af3e5122c3f9c6c55c8b18d2ae9fac15aa68e72c
- MD5 47ed4bcdfc89e49ecd08e0e8923b3b23
- SHA1 1b577687fd89ff0f8c7e1bc41eae078552169692
- SHA512 d252fcb6d78385045f552def433c4d5be5f31e7e0a55c7dcb09dc73697cb74f78f50ee1db5246922f720a9bb2679d86ff636530774b6eaf1b1e9136a4262c6fe
- SSDEEP 3072:2NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0T:rqZ4h4fIqPWQd/4KUNNFg
- TLSH T1B3D32849EB8310F1FE6701B010AAEBFF4236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1