General
-
Target
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180
-
Size
64KB
-
Sample
220206-2ge8naceam
-
MD5
6a639120f974b6e86091f53ca5e1fed4
-
SHA1
001d244a5271b62fecdf9e6d56c2dfa7d582b2dd
-
SHA256
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180
-
SHA512
d098d01ae27db9e8150df68b607d7ad6a8c9a90518368b08ceb702becc7b428fc2527b59b1f16b7a8ee2bbd0909e05a0c8e5d1d085c07575c1caad0de7ef9ff0
Static task
static1
Behavioral task
behavioral1
Sample
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180.iso
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180.iso
Resource
win10v2004-en-20220113
Behavioral task
behavioral3
Sample
,_Payment_Receipt.js
Resource
win7-en-20211208
Behavioral task
behavioral4
Sample
,_Payment_Receipt.js
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180
-
Size
64KB
-
MD5
6a639120f974b6e86091f53ca5e1fed4
-
SHA1
001d244a5271b62fecdf9e6d56c2dfa7d582b2dd
-
SHA256
4a132f97d3167962727ad1c6810f0f53a664f9bb957833f7ce29b9a194479180
-
SHA512
d098d01ae27db9e8150df68b607d7ad6a8c9a90518368b08ceb702becc7b428fc2527b59b1f16b7a8ee2bbd0909e05a0c8e5d1d085c07575c1caad0de7ef9ff0
Score4/10 -
-
-
Target
,_Payment_Receipt.js
-
Size
3KB
-
MD5
2e4880c0a894ff9dc5936c2d5827fab1
-
SHA1
b6302cd52f6a81b0e72963057061df72ef4838a8
-
SHA256
6bf6e8ff133c8bb105f3169405560a6c80bc36ab3addea2a603811eacdd1068e
-
SHA512
73704b08e788aadb3d2d4a51e3b988cc6a26f28695eff147fac5aea54554dc7d66919e82677b518eb8136b55a0bc3211df6744220d95bd89aa11f30b552e6532
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-