General
-
Target
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e
-
Size
60KB
-
Sample
220212-gtf1haggh4
-
MD5
13030c3dd7c830a77cc3e333691a8813
-
SHA1
1539f57703a248b4dea16ec240d309f82480d2d8
-
SHA256
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e
-
SHA512
adbf8b58646da4f7a32c98385828d0ca7b208762434b67018ec81ccf4ee05dfac8cb7ec4d01fa43754767fad1aaa25c94ed8ac672de3bca57907f9f3a47c490e
Static task
static1
Behavioral task
behavioral1
Sample
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e
-
Size
60KB
-
MD5
13030c3dd7c830a77cc3e333691a8813
-
SHA1
1539f57703a248b4dea16ec240d309f82480d2d8
-
SHA256
10e7bcd42696d458a5c6ff70c0425bb254e7b0d275d6650c0f302b49c8fc488e
-
SHA512
adbf8b58646da4f7a32c98385828d0ca7b208762434b67018ec81ccf4ee05dfac8cb7ec4d01fa43754767fad1aaa25c94ed8ac672de3bca57907f9f3a47c490e
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-