General
- Target 0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef
- Size 59KB
- Sample261017-e2rqvshv4n
- SHA256 0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef
- MD5 bb1e77a54def150d4191653c4542bac5
- SHA1 06721de0a9b0a84e32c8c0d329e70fac482f517c
- SHA512 a72be048b72ef436c9de2743faa82523a049ce0737c2e1c90b47b569b4f85db26b02fbc38ea4a78b52c284bb01687c9e28c22187f88a2ab214433d08685fbcc7
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:LL+bxmc+kHfrx83SAc
- TLSH T1CB53F1A594948F3EE8D3FAB29FB542709C3539FA4F9A42250F0D743E9B79AC00A77141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef
- Size 59KB
- SHA256 0e470aa74782c06dd764e12cbcb116ac139bb1418c6d5b534de2f3a83b668fef
- MD5 bb1e77a54def150d4191653c4542bac5
- SHA1 06721de0a9b0a84e32c8c0d329e70fac482f517c
- SHA512 a72be048b72ef436c9de2743faa82523a049ce0737c2e1c90b47b569b4f85db26b02fbc38ea4a78b52c284bb01687c9e28c22187f88a2ab214433d08685fbcc7
- SSDEEP 1536:LJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:LL+bxmc+kHfrx83SAc
- TLSH T1CB53F1A594948F3EE8D3FAB29FB542709C3539FA4F9A42250F0D743E9B79AC00A77141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1