General
-
Target
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a
-
Size
60KB
-
Sample
220212-h5fdsahdg4
-
MD5
0faea8686836730f097b9575005ae50b
-
SHA1
8ccae3c4de2f4b2b0dd31f78a667d5cf3bdfc2a3
-
SHA256
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a
-
SHA512
8f898363c5a64666bfab3c23bbca00f4dbdd8f44a9bb64fcb8ad3794d60316eb05914acfab39358822818bfd73799859e36da5198eb35b3ffe640e8c68c5f05c
Static task
static1
Behavioral task
behavioral1
Sample
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a
-
Size
60KB
-
MD5
0faea8686836730f097b9575005ae50b
-
SHA1
8ccae3c4de2f4b2b0dd31f78a667d5cf3bdfc2a3
-
SHA256
0de7c764d9ac1d77b0d811b4be8b88632931f78756f3b223301b85a08320d93a
-
SHA512
8f898363c5a64666bfab3c23bbca00f4dbdd8f44a9bb64fcb8ad3794d60316eb05914acfab39358822818bfd73799859e36da5198eb35b3ffe640e8c68c5f05c
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-