General
- Target bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b
- Size 59KB
- Sample261017-hkmmcsdf63
- SHA256 bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b
- MD5 6e11ea29ce39b549bdf2c0ef2c0d6399
- SHA1 99a4f2dd5543f4ad9e62293eeff83d82d64d59cb
- SHA512 5667a37562d929cb6756a5d42c4eba4ca6768c3703b9cd6eb7134e2ea189ab84b50c43a72a68a836438b29b634391321c2d9e4bd89a73a1f1d3701031002d982
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRia:NL+bxmc+kHfrx83SAa
- TLSH T16E53F1A598A48B3EE8D3FAB2DFB542709C3539FA4F5A42190F1D743E9779AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b
- Size 59KB
- SHA256 bbfb37f2a3fb882b721b5c54b8b34ff3671ba684b8393e6fba3a4b8240bfe08b
- MD5 6e11ea29ce39b549bdf2c0ef2c0d6399
- SHA1 99a4f2dd5543f4ad9e62293eeff83d82d64d59cb
- SHA512 5667a37562d929cb6756a5d42c4eba4ca6768c3703b9cd6eb7134e2ea189ab84b50c43a72a68a836438b29b634391321c2d9e4bd89a73a1f1d3701031002d982
- SSDEEP 1536:NJsXcv+bxpkmitg1IxdsHfRhx83US4HRia:NL+bxmc+kHfrx83SAa
- TLSH T16E53F1A598A48B3EE8D3FAB2DFB542709C3539FA4F5A42190F1D743E9779AC00A73101
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1