General
- Target 3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007
- Size 59KB
- Sample261017-pcvfkafs8t
- SHA256 3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007
- MD5 82fe15feec366b0b6cbce3d2d396fe81
- SHA1 b8e87ae8ab02004a98ffa8ba59648cbee078db7e
- SHA512 61a86f311f79ac4c3fca6c2f5ce21fc89bf3d8bb97cb037cd51a9f9567488b068a7554ffb7789eb6644ae6fb50f308e4f3125096631cad57696c3c3c417f331a
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiG:ZL+bxmc+kHfrx83SAG
- TLSH T16E53F1A594A48F3EE8D3FAB29FB542709C3539FA4F8A42150F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007
- Size 59KB
- SHA256 3fe7c259c883a11c4ab9915a5bf08fd9ace9a224f43369dbc5ff88a528080007
- MD5 82fe15feec366b0b6cbce3d2d396fe81
- SHA1 b8e87ae8ab02004a98ffa8ba59648cbee078db7e
- SHA512 61a86f311f79ac4c3fca6c2f5ce21fc89bf3d8bb97cb037cd51a9f9567488b068a7554ffb7789eb6644ae6fb50f308e4f3125096631cad57696c3c3c417f331a
- SSDEEP 1536:ZJsXcv+bxpkmitg1IxdsHfRhx83US4HRiG:ZL+bxmc+kHfrx83SAG
- TLSH T16E53F1A594A48F3EE8D3FAB29FB542709C3539FA4F8A42150F0D743E9779AC00A73141
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1