General
- Target bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1
- Size 135KB
- Sample261017-ehhnvag18p
- SHA256 bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1
- MD5 9ca020ba3f5e2034951f6efc67ffddec
- SHA1 1bcba4f310b64c01443d785b0a35a2aebd560a92
- SHA512 24a74edc21bc0cfd6a1d0bfa2c299eaa8d3032dbdad135adf21bd85ff3d66bab62c0e39a7053755d35677edc2597e4a9b5490810178a34e1eb52246332dde95f
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F05:nqZ4h4fIqPWQd/4KUNNFw
- TLSH T127D32849EB8310F0FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1
- Size 135KB
- SHA256 bc32d9bba0605be45be57bf6b9a6ed6a83ba1bab7d2c92819337d4fd1ed132a1
- MD5 9ca020ba3f5e2034951f6efc67ffddec
- SHA1 1bcba4f310b64c01443d785b0a35a2aebd560a92
- SHA512 24a74edc21bc0cfd6a1d0bfa2c299eaa8d3032dbdad135adf21bd85ff3d66bab62c0e39a7053755d35677edc2597e4a9b5490810178a34e1eb52246332dde95f
- SSDEEP 3072:KNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F05:nqZ4h4fIqPWQd/4KUNNFw
- TLSH T127D32849EB8310F0FE6701B010AAEBFF4236B511D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1