General
- Target modified.exe
- Size 6.2MB
- Sample261102-ba332aes8x
- SHA256 cfa111e4e1bfbd6a6c66e41a87671323efac6828226b4784715dce82d957bad6
- MD5 340e8b5060188e4c8b0cd1af3d2ddd77
- SHA1 d93b7cc3e3526116653a1b502dc59617c450ccb3
- SHA512 d4262563149d253b3358ddf9079043ce36ca13b7ac6c95a3efb70c61417ab25c757c7b5d24de489b91ba18221ad94991c5bdf6cbf0c8f5ccbab904e8d96c1310
- SSDEEP 98304:G1cmn6Fp7Cb3LfG+P46g18frP3wbzWFimaI7dlo:bFp7CrLHgbzWFimaI7dl
- TLSH T1AE669E52BE8D8176C91A11311B3DAF6A5229BD247B2855C3B2703F7EDC723D1283A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
modified.exe
Resource
win10v2004-20260911-en
22 signatures
900 seconds
Behavioral task
behavioral2
Sample
modified.exe
Resource
win11ltsc2024-20260911-en
23 signatures
900 seconds
Malware Config
Targets
-
- Target modified.exe
- Size 6.2MB
- SHA256 cfa111e4e1bfbd6a6c66e41a87671323efac6828226b4784715dce82d957bad6
- MD5 340e8b5060188e4c8b0cd1af3d2ddd77
- SHA1 d93b7cc3e3526116653a1b502dc59617c450ccb3
- SHA512 d4262563149d253b3358ddf9079043ce36ca13b7ac6c95a3efb70c61417ab25c757c7b5d24de489b91ba18221ad94991c5bdf6cbf0c8f5ccbab904e8d96c1310
- SSDEEP 98304:G1cmn6Fp7Cb3LfG+P46g18frP3wbzWFimaI7dlo:bFp7CrLHgbzWFimaI7dl
- TLSH T1AE669E52BE8D8176C91A11311B3DAF6A5229BD247B2855C3B2703F7EDC723D1283A71B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks whether UAC is enabled
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Browser Extensions
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1