General
-
Target
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c
-
Size
60KB
-
Sample
220212-eagrkshbdj
-
MD5
52e295ad59446badbf6e446255ea2d6c
-
SHA1
6723d0d12393c0e27227c5c3c52a89692cf1ced0
-
SHA256
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c
-
SHA512
7c00ccfb304d397736c415b562f693a79993794ca83096e8059da7948a2e753bdbed68fe82ebb43956001cd6cbb3a013c93e5f19956ba7756b18bb738f5b086e
Static task
static1
Behavioral task
behavioral1
Sample
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c
-
Size
60KB
-
MD5
52e295ad59446badbf6e446255ea2d6c
-
SHA1
6723d0d12393c0e27227c5c3c52a89692cf1ced0
-
SHA256
16e6ebfa4650c6d1b7d8ca40830d3647b75473bbc53b221f9b98e3479d016b4c
-
SHA512
7c00ccfb304d397736c415b562f693a79993794ca83096e8059da7948a2e753bdbed68fe82ebb43956001cd6cbb3a013c93e5f19956ba7756b18bb738f5b086e
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-