General
- Target 0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c
- Size 59KB
- Sample261017-e662cadb43
- SHA256 0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c
- MD5 f5bbf636a0bc3fa65d1ee7f78df01ec6
- SHA1 27321de71034b8d52f20046d147488e13c0dac02
- SHA512 61068efe815e57c543b50b877423febbfd5972561c2c92cb9575d6c590e1fd03038270a02bd57415b8891341155b6202e81f866451405073f8b706ad3c8aa36f
- SSDEEP 1536:kJsXcv+bxpkmitg1IxdsHfRhx83US4HRiX:kL+bxmc+kHfrx83SAX
- TLSH T14653F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F4A42190F0D743E9769AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c
- Size 59KB
- SHA256 0c022acdba814e466180ea00feaff817bb6f45f491f622f8d86c43f31d80170c
- MD5 f5bbf636a0bc3fa65d1ee7f78df01ec6
- SHA1 27321de71034b8d52f20046d147488e13c0dac02
- SHA512 61068efe815e57c543b50b877423febbfd5972561c2c92cb9575d6c590e1fd03038270a02bd57415b8891341155b6202e81f866451405073f8b706ad3c8aa36f
- SSDEEP 1536:kJsXcv+bxpkmitg1IxdsHfRhx83US4HRiX:kL+bxmc+kHfrx83SAX
- TLSH T14653F1A9A4948F3EE8D7FAB2DFB542709C3539FA4F4A42190F0D743E9769AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1