General
- Target 136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc
- Size 32KB
- Sample261024-xtgj2afe92
- SHA256 136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc
- MD5 fb9fda656e3893b8734dc980898c314f
- SHA1 6637cace3d89bcf56d985b27b3f31ebc3ae807d3
- SHA512 de84b4418198331549ff8d958474b6122401af4b19d23cf2f837842bcdf0e24e15068d004d07847145a01c55a0b15ceb4d0e08c23a5d6fb33bb3f95f21c55072
- SSDEEP 768:b7jtZ9DSZ3Er2z65I1sQwkbs4q1sgmQ+:XD9mFE6WkbFqOgmQ+
- TLSH T14DE22A0473E49625E2FE5ABD49328504833AF6475E23D79E2FD8A09F1623BC48F51BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc.exe
Resource
win10v2004-20260911-en
12 signatures
60 seconds
Behavioral task
behavioral2
Sample
136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc.exe
Resource
win11ltsc2024-20260911-en
4 signatures
60 seconds
Malware Config
Targets
-
- Target 136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc
- Size 32KB
- SHA256 136f2c4ce285ae1a56df090ecd262d048e853e69aa8548d80156305829a946bc
- MD5 fb9fda656e3893b8734dc980898c314f
- SHA1 6637cace3d89bcf56d985b27b3f31ebc3ae807d3
- SHA512 de84b4418198331549ff8d958474b6122401af4b19d23cf2f837842bcdf0e24e15068d004d07847145a01c55a0b15ceb4d0e08c23a5d6fb33bb3f95f21c55072
- SSDEEP 768:b7jtZ9DSZ3Er2z65I1sQwkbs4q1sgmQ+:XD9mFE6WkbFqOgmQ+
- TLSH T14DE22A0473E49625E2FE5ABD49328504833AF6475E23D79E2FD8A09F1623BC48F51BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1