General
-
Target
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978
-
Size
36KB
-
Sample
220212-jhxvzsbcaj
-
MD5
37aa5eb8f3e650995decc3ea157ddccb
-
SHA1
78c3cf48b8cc73e780a5eb48ff526d5d14ea6d36
-
SHA256
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978
-
SHA512
2f9fb734f8715979bc058000ab989cf0ae01de5792ded347cc5b1490e0bd1b4c644086cb57dd2510d17ed6cdfd4761048149d9334c5f24b275e32e0af22dbe0c
Static task
static1
Behavioral task
behavioral1
Sample
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978
-
Size
36KB
-
MD5
37aa5eb8f3e650995decc3ea157ddccb
-
SHA1
78c3cf48b8cc73e780a5eb48ff526d5d14ea6d36
-
SHA256
0cef259f1dca190ac3e31d684c1a4d409e8b249a5509b83b15993644de4cb978
-
SHA512
2f9fb734f8715979bc058000ab989cf0ae01de5792ded347cc5b1490e0bd1b4c644086cb57dd2510d17ed6cdfd4761048149d9334c5f24b275e32e0af22dbe0c
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-