General
- Target d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933
- Size 59KB
- Sample261017-efsq2ada38
- SHA256 d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933
- MD5 09db587d90816fd41557d0c977efd830
- SHA1 f51a6d72e4bac31ddcea526a51da6ef4dce9f011
- SHA512 05852f2cf0accd23d8463863734a0d0d613109e72369eb8a0abefeff851fff947caaf7b19b861614faf3e941a2be6b1f2ea528ecf51b18a7acc7364ce9e7edd1
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:KL+bxmc+kHfrx83SAz
- TLSH T19453F1A994948F3EE8D3FAB29FB542749C3539FA4F8A42150F1D743E9769AC00A72101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933
- Size 59KB
- SHA256 d9c45a41b1897fe535be79ab39ee1d369b85499257770c5be31f90315e6ef933
- MD5 09db587d90816fd41557d0c977efd830
- SHA1 f51a6d72e4bac31ddcea526a51da6ef4dce9f011
- SHA512 05852f2cf0accd23d8463863734a0d0d613109e72369eb8a0abefeff851fff947caaf7b19b861614faf3e941a2be6b1f2ea528ecf51b18a7acc7364ce9e7edd1
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:KL+bxmc+kHfrx83SAz
- TLSH T19453F1A994948F3EE8D3FAB29FB542749C3539FA4F8A42150F1D743E9769AC00A72101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1