General
- Target betapanties.exe
- Size 453.6MB
- Sample261102-s3887abs2t
- SHA256 78da40f1ebd48e23c384d3c8b827330f18000041277ec3df6c42231fb1c42b68
- MD5 b451b6c4fea700de1ed46cdd44babdc2
- SHA1 122b99a50f22007f33d9a796f1bec06306690579
- SHA512 6542d2cc931f36971c0f46a74ec58ad12f0c0bce5a4c8c2273e2f8a20aa4365ffe5127d8b5a38301606f60a24011ad6729ce6a5eba1763af71fd6401607b09cb
- SSDEEP 6291456:yBk1BdCwtY5s6Tt2rJE+7m895EdCw8RuJgwheC85s6tWTViRmtnzV+5vlPWojNLY:+Ut8z2rm+a9hteCwDqViRU+3PWSNLfw
- TLSH T107392311A7E80B16E77FC27DC6639252E7B1B4431351C2CF0194DA983F53BE1AA362B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
betapanties.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
betapanties.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target betapanties.exe
- Size 453.6MB
- SHA256 78da40f1ebd48e23c384d3c8b827330f18000041277ec3df6c42231fb1c42b68
- MD5 b451b6c4fea700de1ed46cdd44babdc2
- SHA1 122b99a50f22007f33d9a796f1bec06306690579
- SHA512 6542d2cc931f36971c0f46a74ec58ad12f0c0bce5a4c8c2273e2f8a20aa4365ffe5127d8b5a38301606f60a24011ad6729ce6a5eba1763af71fd6401607b09cb
- SSDEEP 6291456:yBk1BdCwtY5s6Tt2rJE+7m895EdCw8RuJgwheC85s6tWTViRmtnzV+5vlPWojNLY:+Ut8z2rm+a9hteCwDqViRU+3PWSNLfw
- TLSH T107392311A7E80B16E77FC27DC6639252E7B1B4431351C2CF0194DA983F53BE1AA362B6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
2Windows Service
2Event Triggered Execution
1Netsh Helper DLL
1