General
-
Target
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401
-
Size
36KB
-
Sample
220212-g1tvyaaedj
-
MD5
f515e08de5cbced19bc8edfb03643077
-
SHA1
8c45e4cc5515be7353ca9a897593219edcf93b8a
-
SHA256
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401
-
SHA512
9e0cdfbaf6427655d8a5681c8d47872fde31eb02a24e17eba422f135a9e382ac5ecacb644c3932dbe5e78a8257e9bea43cd441e4ce39bd0067ab8e2bd7489bb2
Static task
static1
Behavioral task
behavioral1
Sample
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401
-
Size
36KB
-
MD5
f515e08de5cbced19bc8edfb03643077
-
SHA1
8c45e4cc5515be7353ca9a897593219edcf93b8a
-
SHA256
1072c154656b10ecb3ae3020bf95d8394e4ce5d3e41e40265c7a3d8ada05c401
-
SHA512
9e0cdfbaf6427655d8a5681c8d47872fde31eb02a24e17eba422f135a9e382ac5ecacb644c3932dbe5e78a8257e9bea43cd441e4ce39bd0067ab8e2bd7489bb2
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-