General
-
Target
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8
-
Size
753KB
-
Sample
210509-v4tx5ey33s
-
MD5
bd191ff8fc1ad86d1707758b5f075278
-
SHA1
4fcda0e7a514de5e038816efffaaf24e76cc8985
-
SHA256
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8
-
SHA512
3a902599ad32eed405b0d90d0911b2db87b3bec3e160161af74887e868b71fda4825fd8d94ab60021c3eb498ea1fb479be830a6e517a617516eba67e6cf6bcd7
Static task
static1
Behavioral task
behavioral1
Sample
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8.exe
Resource
win10v20210408
Malware Config
Targets
-
-
Target
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8
-
Size
753KB
-
MD5
bd191ff8fc1ad86d1707758b5f075278
-
SHA1
4fcda0e7a514de5e038816efffaaf24e76cc8985
-
SHA256
303e22f56b05c936ecf41591bb9b9ad15a7eba68e34617b96fed85d3e4fae4d8
-
SHA512
3a902599ad32eed405b0d90d0911b2db87b3bec3e160161af74887e868b71fda4825fd8d94ab60021c3eb498ea1fb479be830a6e517a617516eba67e6cf6bcd7
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-