General
-
Target
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e
-
Size
58KB
-
Sample
220212-fv4bragch8
-
MD5
7b41b95ef5d58b1f808af2509ca5cfe3
-
SHA1
3d3c9b76cfb6d8f1824435d69d03c152931d35f6
-
SHA256
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e
-
SHA512
c8e7cd26c078217e8658eaa06a5c2eb8e81b223a89d71215a1915b3f24c2a43ff277129e245a275c7c4d1e94790763dddac2a54b164bb3dd6266a5eb04123cfc
Static task
static1
Behavioral task
behavioral1
Sample
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e
-
Size
58KB
-
MD5
7b41b95ef5d58b1f808af2509ca5cfe3
-
SHA1
3d3c9b76cfb6d8f1824435d69d03c152931d35f6
-
SHA256
1365d82c9a4393c181f31a076e3b60b85b3eb65a731cdce90edc2588d3ead17e
-
SHA512
c8e7cd26c078217e8658eaa06a5c2eb8e81b223a89d71215a1915b3f24c2a43ff277129e245a275c7c4d1e94790763dddac2a54b164bb3dd6266a5eb04123cfc
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-