General
-
Target
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0
-
Size
36KB
-
Sample
220212-f566dsgeb2
-
MD5
e424da6dd2fbe2d9adf4757a15544e01
-
SHA1
52cd4009c0d83f368403e28ac256cc3322e2954a
-
SHA256
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0
-
SHA512
8c7d4cc630997d652328538bca930e7d0b28e2dfd3a48aec241be705e1dc846955a3b42662e6acbc87707b6d94c87252ee395124e1829dde0ce25b8fada3eb6d
Static task
static1
Behavioral task
behavioral1
Sample
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0
-
Size
36KB
-
MD5
e424da6dd2fbe2d9adf4757a15544e01
-
SHA1
52cd4009c0d83f368403e28ac256cc3322e2954a
-
SHA256
12a979d5a790252d1698d3c7050bbb91d248fb93f2173760e34ed1e6bbd0e8f0
-
SHA512
8c7d4cc630997d652328538bca930e7d0b28e2dfd3a48aec241be705e1dc846955a3b42662e6acbc87707b6d94c87252ee395124e1829dde0ce25b8fada3eb6d
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-