General
- Target 13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504
- Size 135KB
- Sample261102-e3lw1ag17k
- SHA256 13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504
- MD5 2aa05df9d5fa6fb51abbe3af5a780ed3
- SHA1 02df8687db71e5154fb0518201e5ee5e52a534da
- SHA512 aa620a5c1e459047fd8914ff54dc86a5de09d5839e27ba371872512e7e30da809be33f8ca525ae2429985cdc78d76e644785df1f9040fed9e7e25d8a98466dbd
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0a:OqZ4h4fIqPWQd/4KUNNFZ
- TLSH T114D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target 13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504
- Size 135KB
- SHA256 13fc75f7f4056811e554fc646e02b86998ba4a8120ef47f20c4173a5d3cc5504
- MD5 2aa05df9d5fa6fb51abbe3af5a780ed3
- SHA1 02df8687db71e5154fb0518201e5ee5e52a534da
- SHA512 aa620a5c1e459047fd8914ff54dc86a5de09d5839e27ba371872512e7e30da809be33f8ca525ae2429985cdc78d76e644785df1f9040fed9e7e25d8a98466dbd
- SSDEEP 3072:HNRrWgsD+ZKHhfWrfI10PKucQd9Z7zH/4KUNk0F0a:OqZ4h4fIqPWQd/4KUNNFZ
- TLSH T114D32849EB8310F1FE6701B010AAEBFF5236B501D93A8D66D786CD86ADB29770C1531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1