General
- Target c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5
- Size 59KB
- Sample261017-gpftyaat8r
- SHA256 c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5
- MD5 6f9510cf824aa9a3ebc619e14263bb50
- SHA1 a76a99100da3e8ac01be3dc5cf210235f22e9307
- SHA512 f4156773c71b4d9edb4fd32a5389416a5e61647d81266a10b9913d541eab220f3a44d86fecbc5561cdaba4803a42d30c50a73b0fd9da8f187bf99281f46c59dd
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:KL+bxmc+kHfrx83SAc
- TLSH T17C53F1A594948F3EE8D3FAB29FB542749C3139FA4F4A42191F1D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5
- Size 59KB
- SHA256 c294116bce94cf912a274151cbce02990e19baaf773875d9ff0c6b33806b54f5
- MD5 6f9510cf824aa9a3ebc619e14263bb50
- SHA1 a76a99100da3e8ac01be3dc5cf210235f22e9307
- SHA512 f4156773c71b4d9edb4fd32a5389416a5e61647d81266a10b9913d541eab220f3a44d86fecbc5561cdaba4803a42d30c50a73b0fd9da8f187bf99281f46c59dd
- SSDEEP 1536:KJsXcv+bxpkmitg1IxdsHfRhx83US4HRic:KL+bxmc+kHfrx83SAc
- TLSH T17C53F1A594948F3EE8D3FAB29FB542749C3139FA4F4A42191F1D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1