General
-
Target
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f
-
Size
35KB
-
Sample
220212-g94fqsafek
-
MD5
322d0c97a301d677bf3c1ce0ddd3c252
-
SHA1
4fc59c20c1a90e6fe9c4296d35480d508e891868
-
SHA256
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f
-
SHA512
08ca4579d2b8561bc2815c2614ae01b8714bebd781e12f4955ee029c047a083a0e48c59463b11c340acba8405431be37bb95f6bd5f897fc1d6ef05f8f9fc7c91
Static task
static1
Behavioral task
behavioral1
Sample
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f
-
Size
35KB
-
MD5
322d0c97a301d677bf3c1ce0ddd3c252
-
SHA1
4fc59c20c1a90e6fe9c4296d35480d508e891868
-
SHA256
0fcb525c7c9a136edb05a0bc2e88a078d43a18cd686027e69019417686ee6c5f
-
SHA512
08ca4579d2b8561bc2815c2614ae01b8714bebd781e12f4955ee029c047a083a0e48c59463b11c340acba8405431be37bb95f6bd5f897fc1d6ef05f8f9fc7c91
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-