General
-
Target
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf
-
Size
36KB
-
Sample
220212-h8njkaheb8
-
MD5
1ce6a4b53771e67484f81742b23cdb4b
-
SHA1
7f0d55ad3b5a3ba62caaebe5578185465de2f845
-
SHA256
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf
-
SHA512
5da9dbbefc78efe55d59e60e54ba76b76ed265821910885a8262c27e218b2eeb47862d4d02409afcc9726481e1d907c72ad65a819a7a532d7963a66f24ab3673
Static task
static1
Behavioral task
behavioral1
Sample
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf
-
Size
36KB
-
MD5
1ce6a4b53771e67484f81742b23cdb4b
-
SHA1
7f0d55ad3b5a3ba62caaebe5578185465de2f845
-
SHA256
0da8b8902bf760fbe3801b284690e8af76fedf683d5363b52dd8e82aae3dccbf
-
SHA512
5da9dbbefc78efe55d59e60e54ba76b76ed265821910885a8262c27e218b2eeb47862d4d02409afcc9726481e1d907c72ad65a819a7a532d7963a66f24ab3673
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-