General
- Target f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275
- Size 228KB
- Sample261102-jebhkstw2n
- SHA256 f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275
- MD5 3ab6557329942bf39bf5b9021643ece8
- SHA1 9b14e00a9ace7da19ad132dd33f8323669c8f3ff
- SHA512 e0641109787c4ae5b5e6da9a042d35371ebcd60307a10e57d11033d1db442d0a3d95be5f21cfd7edf79e2e1d53cdd47b23c9d64040e4dd0bbb890980f13363d4
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnw5:6GzDegC51mszqUXfuTnc
- TLSH T1DF342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275.exe
Resource
win10v2004-20260911-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275.exe
Resource
win11ltsc2024-20260911-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275
- Size 228KB
- SHA256 f1c4c33834127a1d38737c23cb1f0c3b82395a90bbfed0fddf7d9d40673b0275
- MD5 3ab6557329942bf39bf5b9021643ece8
- SHA1 9b14e00a9ace7da19ad132dd33f8323669c8f3ff
- SHA512 e0641109787c4ae5b5e6da9a042d35371ebcd60307a10e57d11033d1db442d0a3d95be5f21cfd7edf79e2e1d53cdd47b23c9d64040e4dd0bbb890980f13363d4
- SSDEEP 3072:UfDmzPOs8y4d9jKAgiuaDt1KFsvQRtw6OHZqUXkkhuTnw5:6GzDegC51mszqUXfuTnc
- TLSH T1DF342A19FA0704F1EA33977244EFEA3BC3117C1686379E2FEB4FDA4468725662809385
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1