General
- Target MediaCreationTool20H2.exe
- Size 18.6MB
- Sample210111-eaz8mqhgh6
- SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
- MD5 aa2ad37bb74c05a49417e3d2f1bd89ce
- SHA1 1bf5f814ffe801b4e6f118e829c0d2821d78a60a
- SHA512 fab34ccbefbcdcec8f823840c16ae564812d0e063319c4eb4cc1112cf775b8764fea59d0bbafd4774d84b56e08c24056fa96f27425c4060e12eb547c2ae086cc
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
MediaCreationTool20H2.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
MediaCreationTool20H2.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target MediaCreationTool20H2.exe
- Size 18.6MB
- SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
- MD5 aa2ad37bb74c05a49417e3d2f1bd89ce
- SHA1 1bf5f814ffe801b4e6f118e829c0d2821d78a60a
- SHA512 fab34ccbefbcdcec8f823840c16ae564812d0e063319c4eb4cc1112cf775b8764fea59d0bbafd4774d84b56e08c24056fa96f27425c4060e12eb547c2ae086cc
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
JavaScript code in executable