General
-
Target
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802
-
Size
58KB
-
Sample
220212-eznlesfhh7
-
MD5
828a65df60539157574421059c6d2376
-
SHA1
2fee5c55e1f81ac1a36b96f0b3e5b6b166231bb0
-
SHA256
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802
-
SHA512
2ef8449c9bc738790ad3447cd829901c2172dcb626b0a3bbc6bc31ef4fbf9187cacbb8429602b9a485bc8baefdf8dd85c2c7b91f3e31b419237bd5a1763f9ae2
Static task
static1
Behavioral task
behavioral1
Sample
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802
-
Size
58KB
-
MD5
828a65df60539157574421059c6d2376
-
SHA1
2fee5c55e1f81ac1a36b96f0b3e5b6b166231bb0
-
SHA256
156a70db2f13d31f0fe932d9cc2f414cf8f76f93f7056c50d6218c52b5d0e802
-
SHA512
2ef8449c9bc738790ad3447cd829901c2172dcb626b0a3bbc6bc31ef4fbf9187cacbb8429602b9a485bc8baefdf8dd85c2c7b91f3e31b419237bd5a1763f9ae2
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-