General
- Target 2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230
- Size 59KB
- Sample261017-ejhegawwfv
- SHA256 2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230
- MD5 1ab1324c7a24e51d139abc08e8ab14f5
- SHA1 aa843f3433bc473ad2c656296474e466e8329e32
- SHA512 7d0188110654a67f22d94ba90a1331de3661340a2d5a1a70eb1eaabf0b12f73e518fd4785da4aa77bcc76f4bd3e0ea768517f333266afedff6f6194149a3843c
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiH:ZL+bxmc+kHfrx83SAH
- TLSH T1B553F1A5A4948F3EE8D3FAB29FB543749C3139FA4F4A42290F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230
- Size 59KB
- SHA256 2ba4cc7cafbaeceb3bd2ecf2db211d1fefff296b9e0d78df1d09ed3a0b0cd230
- MD5 1ab1324c7a24e51d139abc08e8ab14f5
- SHA1 aa843f3433bc473ad2c656296474e466e8329e32
- SHA512 7d0188110654a67f22d94ba90a1331de3661340a2d5a1a70eb1eaabf0b12f73e518fd4785da4aa77bcc76f4bd3e0ea768517f333266afedff6f6194149a3843c
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiH:ZL+bxmc+kHfrx83SAH
- TLSH T1B553F1A5A4948F3EE8D3FAB29FB543749C3139FA4F4A42290F0D743E9779A800A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1