General
- Target New Client.exe
- Size 223KB
- Sample261018-trf9ps1zhy
- SHA256 0c28af6799d7f2b1c0403fa51ed530722afdbb94f212d79ae44e9baef319e0e1
- MD5 5938e0412088cd5c71fa108e15e51313
- SHA1 9f9c757e1087de407678196eaf5ff0f3028c4464
- SHA512 7c0fdba189cbe70ec795c3081996bcf2328b51cf3944cca8641f2eca43e2e2754f83686bbd89cfe29ed522b0828f1c1b7c1ac58ed2942e21474e04ffdf66617f
- SSDEEP 3072:G5/DR2KfQxwHSrW8haJFKx8dwp2MpTVp2x1UoXLX09dKf6QZmDGgXz6DOYwHH:GBzJc8Op2MpTVS9XY9dKiQ8aROl
- TLSH T19624E6BFB6888F01DB5519B1D0DF902487E1AD931632E74A3F4A63691903377EC49BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
New Client.exe
Resource
win10v2004-20260911-en
Behavioral task
behavioral2
Sample
New Client.exe
Resource
win10ltsc2021-20260911-en
Behavioral task
behavioral3
Sample
New Client.exe
Resource
win11-20260911-en
Behavioral task
behavioral4
Sample
New Client.exe
Resource
win11ltsc2024-20260911-en
Malware Config
Targets
-
- Target New Client.exe
- Size 223KB
- SHA256 0c28af6799d7f2b1c0403fa51ed530722afdbb94f212d79ae44e9baef319e0e1
- MD5 5938e0412088cd5c71fa108e15e51313
- SHA1 9f9c757e1087de407678196eaf5ff0f3028c4464
- SHA512 7c0fdba189cbe70ec795c3081996bcf2328b51cf3944cca8641f2eca43e2e2754f83686bbd89cfe29ed522b0828f1c1b7c1ac58ed2942e21474e04ffdf66617f
- SSDEEP 3072:G5/DR2KfQxwHSrW8haJFKx8dwp2MpTVp2x1UoXLX09dKf6QZmDGgXz6DOYwHH:GBzJc8Op2MpTVS9XY9dKiQ8aROl
- TLSH T19624E6BFB6888F01DB5519B1D0DF902487E1AD931632E74A3F4A63691903377EC49BCA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Scheduled Task/Job
1Scheduled Task
1