General
-
Target
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6
-
Size
36KB
-
Sample
220212-htz9tahce4
-
MD5
0e87781c294611f59d1523ebbfa09aa1
-
SHA1
de6baf2b9f553690d645032367b61d0109beca78
-
SHA256
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6
-
SHA512
23e3ae27a0a8b6ac0a11ca242f82288649b6423f171f18a9c5bbf1555cb9c1a92fdd8ee87eee825605ca92066d9705e6ef86c7cbeb918225bcbf72b38c2fdd38
Static task
static1
Behavioral task
behavioral1
Sample
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6
-
Size
36KB
-
MD5
0e87781c294611f59d1523ebbfa09aa1
-
SHA1
de6baf2b9f553690d645032367b61d0109beca78
-
SHA256
0ec275956d05319b6948ee6530699f36773a7959613d7dee9280d7e052aaf2f6
-
SHA512
23e3ae27a0a8b6ac0a11ca242f82288649b6423f171f18a9c5bbf1555cb9c1a92fdd8ee87eee825605ca92066d9705e6ef86c7cbeb918225bcbf72b38c2fdd38
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-