General
-
Target
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2
-
Size
1004KB
-
Sample
210508-4vl94b2496
-
MD5
fc189ca19871907010a0c35b1470d3f6
-
SHA1
c2e5574dd8af8757051b104d32d7c66c209e5b02
-
SHA256
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2
-
SHA512
1fdd6de30d6a851183fb5aa563ed9f6f3126a5f5a48bb26256d38dd936a3af792636927b2d07583cab4e173917836644daff428209cf03c41cb69ce5b93cbd55
Static task
static1
Behavioral task
behavioral1
Sample
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2.exe
Resource
win10v20210410
Malware Config
Targets
-
-
Target
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2
-
Size
1004KB
-
MD5
fc189ca19871907010a0c35b1470d3f6
-
SHA1
c2e5574dd8af8757051b104d32d7c66c209e5b02
-
SHA256
b043ea5e5cb6a3ec4cee50cd21de46945a80abbb6efe01a7f8c5772df65790e2
-
SHA512
1fdd6de30d6a851183fb5aa563ed9f6f3126a5f5a48bb26256d38dd936a3af792636927b2d07583cab4e173917836644daff428209cf03c41cb69ce5b93cbd55
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-