General
-
Target
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3
-
Size
35KB
-
Sample
220212-j9qwrabfcj
-
MD5
678b15804daf5eeef6cd22dbd06b4b32
-
SHA1
6880cbbf81a5e4752d9e8eacb12eb2d96158babd
-
SHA256
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3
-
SHA512
de3e377b88892f72aee59420ff289fc4ad95204edcc1d8021622ff930b925a029f8a6db01d78176d1a8d8f6154daf822be075b5cef6d808c75db16cb0f2a7d72
Static task
static1
Behavioral task
behavioral1
Sample
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3
-
Size
35KB
-
MD5
678b15804daf5eeef6cd22dbd06b4b32
-
SHA1
6880cbbf81a5e4752d9e8eacb12eb2d96158babd
-
SHA256
0b3a6a5d2a52ccf5f1c92552af55435ec4f0089cbe4c0194b4a3b2ffd1b424e3
-
SHA512
de3e377b88892f72aee59420ff289fc4ad95204edcc1d8021622ff930b925a029f8a6db01d78176d1a8d8f6154daf822be075b5cef6d808c75db16cb0f2a7d72
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-