General
-
Target
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81
-
Size
60KB
-
Sample
220212-g2jflaaedr
-
MD5
fcde30fcad657c2e39babc6b16f2246c
-
SHA1
d2ca179077635321cfcf27edb4f2a086e0a5dfe2
-
SHA256
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81
-
SHA512
29095a4b4fb9890e39dc4fa572972b76c984c0cae52cc2172b72286129ad7633713bdc9c5ebad33305433c162a94984de7e9e2a1969e862d139b3b475c5c63a8
Static task
static1
Behavioral task
behavioral1
Sample
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81
-
Size
60KB
-
MD5
fcde30fcad657c2e39babc6b16f2246c
-
SHA1
d2ca179077635321cfcf27edb4f2a086e0a5dfe2
-
SHA256
105d1df67f0f0f65f6143ccc24a86d94881c3b2dfcb2b2bcb12acd0694684c81
-
SHA512
29095a4b4fb9890e39dc4fa572972b76c984c0cae52cc2172b72286129ad7633713bdc9c5ebad33305433c162a94984de7e9e2a1969e862d139b3b475c5c63a8
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-