General
- Target e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc
- Size 135KB
- Sample261017-kww2aaea87
- SHA256 e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc
- MD5 c9ac9c69e1247ef385f996409c796dcf
- SHA1 5b729833e91b4f7d3b680d23973338b581e97fcd
- SHA512 b84a42f3de37f28c5cdcb931645ea4fa28f51d28a284286c9b8a8ae10b92418da4d8401c48600ec7977669b7174803bfe3d89eface28927997eeadb927edec41
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F06:5qZ4h4fIqPWQd/4KUNNFz
- TLSH T1F9D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc
- Size 135KB
- SHA256 e3eba46880996e4545018815ab1f68183629336af8c6e8bd2fd2161d3bd21cfc
- MD5 c9ac9c69e1247ef385f996409c796dcf
- SHA1 5b729833e91b4f7d3b680d23973338b581e97fcd
- SHA512 b84a42f3de37f28c5cdcb931645ea4fa28f51d28a284286c9b8a8ae10b92418da4d8401c48600ec7977669b7174803bfe3d89eface28927997eeadb927edec41
- SSDEEP 3072:4NRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F06:5qZ4h4fIqPWQd/4KUNNFz
- TLSH T1F9D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1