General
-
Target
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f
-
Size
60KB
-
Sample
220212-h7whsahea9
-
MD5
9a47f4bd505259886f621f5e37741f44
-
SHA1
0bface989cd105a72a6cc97cfe0c7d586e950d8b
-
SHA256
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f
-
SHA512
60e2339aa6f3d664f89786a11c013f0201d898953c28acac52151e2f1e429eafa4a8bf624b2868b118e71fe13fc9b2049d5d5abf0fd7a0535f562ff39d01ebb9
Static task
static1
Behavioral task
behavioral1
Sample
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f
-
Size
60KB
-
MD5
9a47f4bd505259886f621f5e37741f44
-
SHA1
0bface989cd105a72a6cc97cfe0c7d586e950d8b
-
SHA256
0dbe1de2c7be4f37ab9021693bc53d6c7654c4d4973f01ce39abd29ed258543f
-
SHA512
60e2339aa6f3d664f89786a11c013f0201d898953c28acac52151e2f1e429eafa4a8bf624b2868b118e71fe13fc9b2049d5d5abf0fd7a0535f562ff39d01ebb9
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-