General
-
Target
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1
-
Size
1.1MB
-
Sample
210511-ndpq9jcw3x
-
MD5
e709b49637fe6417c4a0d87bae495ba1
-
SHA1
8b72aa4fa153b9f06d91eb83367223692b7e3720
-
SHA256
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1
-
SHA512
f53381207787b2c67c0708ca6605b6aded2f06fb946ab9f38dfa6c75d8289edfd84743af214256a83a16f656671d1d15c37778d3b0a2bc1a567dee75c936fbb1
Static task
static1
Behavioral task
behavioral1
Sample
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1.exe
Resource
win10v20210410
Malware Config
Targets
-
-
Target
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1
-
Size
1.1MB
-
MD5
e709b49637fe6417c4a0d87bae495ba1
-
SHA1
8b72aa4fa153b9f06d91eb83367223692b7e3720
-
SHA256
eb7966388d917e0699365202de9a50848c3dbe4e4be362eacc385053309911c1
-
SHA512
f53381207787b2c67c0708ca6605b6aded2f06fb946ab9f38dfa6c75d8289edfd84743af214256a83a16f656671d1d15c37778d3b0a2bc1a567dee75c936fbb1
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-