General
- Target b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49
- Size 59KB
- Sample261102-e3lk8sea87
- SHA256 b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49
- MD5 1abfd7b427ca5e1c72d905fb26cd4367
- SHA1 66d41c1299eb4a58d0250b7662153333c77f378a
- SHA512 c827f336fa20d0b31d6d4a8b502b686b76bfd1efa51647f1d10f7e71b8e5b44e8753efd4bb09a1a48bd6c6e4239ed49a5cccb226e7b6e6979584b2e5a09d213b
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:RL+bxmc+kHfrx83SAz
- TLSH T18253F1A5A4948F3EE8D7FAB2DFB542749C3539FA4F5A42150F0D743E9B79A800A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49
- Size 59KB
- SHA256 b46d7527e410389d9eeb4fd0ab5829bd157e7e87e82dc3a553dfecbe49a94e49
- MD5 1abfd7b427ca5e1c72d905fb26cd4367
- SHA1 66d41c1299eb4a58d0250b7662153333c77f378a
- SHA512 c827f336fa20d0b31d6d4a8b502b686b76bfd1efa51647f1d10f7e71b8e5b44e8753efd4bb09a1a48bd6c6e4239ed49a5cccb226e7b6e6979584b2e5a09d213b
- SSDEEP 1536:RJsXcv+bxpkmitg1IxdsHfRhx83US4HRiz:RL+bxmc+kHfrx83SAz
- TLSH T18253F1A5A4948F3EE8D7FAB2DFB542749C3539FA4F5A42150F0D743E9B79A800A73201
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1