General
-
Target
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39
-
Size
58KB
-
Sample
220212-jfk4eabbfr
-
MD5
ab001c80ee7211b581634d3e753e965f
-
SHA1
b642a5626205549a8d118aa8dea2c236550edb5d
-
SHA256
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39
-
SHA512
a6f3d59032287f72bf14229a4b921870354309601653a39542a5350a52b99b4986d896a1b592bfe465be61589e9d0021b1ee140c56687fda40a450f6b4e3e6c1
Static task
static1
Behavioral task
behavioral1
Sample
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39
-
Size
58KB
-
MD5
ab001c80ee7211b581634d3e753e965f
-
SHA1
b642a5626205549a8d118aa8dea2c236550edb5d
-
SHA256
0d23cabbc4a3bed35f9b6fefcc355e2f6c6bd01a00ed5b8445b7f2a921621f39
-
SHA512
a6f3d59032287f72bf14229a4b921870354309601653a39542a5350a52b99b4986d896a1b592bfe465be61589e9d0021b1ee140c56687fda40a450f6b4e3e6c1
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-