General
- Target sample
- Size 10KB
- Sample261023-rer5bset6k
- SHA256 2559ee6f2ce1986b7880511c368692ceaa54e014ca5c83b11c1793aec0659954
- MD5 473ea0a69db314393901460453a69942
- SHA1 4280388472d2e00c33c731cf1f964f34e213fbe6
- SHA512 7dfc8296da96b31243f5c00c2146f2cc5f429d81279d2e2a0f06badc94d86d2f3e20adafae215f30b7ff05dbad545fceeec530f13e6557bbf635372a3fbcbd51
- SSDEEP 192:gK/ATO+xpx0xPLx/VJsZE1Xuqn2zP0YQabJJ4cMiMsDaGmOI8YtnH7dtZkYy:+XaBXZP3y
- TLSH T1842203C7CE11B61B6E0B359BE98A120652B74918F3B2BAC57BCC5A45878DE630137F43
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260911-en
27 signatures
600 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260911-en
10 signatures
600 seconds
Malware Config
Targets
-
- Target sample
- Size 10KB
- SHA256 2559ee6f2ce1986b7880511c368692ceaa54e014ca5c83b11c1793aec0659954
- MD5 473ea0a69db314393901460453a69942
- SHA1 4280388472d2e00c33c731cf1f964f34e213fbe6
- SHA512 7dfc8296da96b31243f5c00c2146f2cc5f429d81279d2e2a0f06badc94d86d2f3e20adafae215f30b7ff05dbad545fceeec530f13e6557bbf635372a3fbcbd51
- SSDEEP 192:gK/ATO+xpx0xPLx/VJsZE1Xuqn2zP0YQabJJ4cMiMsDaGmOI8YtnH7dtZkYy:+XaBXZP3y
- TLSH T1842203C7CE11B61B6E0B359BE98A120652B74918F3B2BAC57BCC5A45878DE630137F43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2PowerShell
1Windows Command Shell
1