General
-
Target
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28
-
Size
58KB
-
Sample
220212-kfg77abgam
-
MD5
ef571c00ef21d5357d1c47cba3149835
-
SHA1
c53b7f0afcec3fefa7dff1296c685eae77032ac0
-
SHA256
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28
-
SHA512
a03ed80b229232a538206baa9fdbb1681fed0e1bc944412219520119dd3aac4e4afaa626d21e3068680f79803c44ad919370d66a2a6dbfa51f874a6c547ee5c5
Static task
static1
Behavioral task
behavioral1
Sample
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28
-
Size
58KB
-
MD5
ef571c00ef21d5357d1c47cba3149835
-
SHA1
c53b7f0afcec3fefa7dff1296c685eae77032ac0
-
SHA256
0aeb9f9dc2406cfc6ad48ef574344339acadc9d57920a6c85459fe90307a0c28
-
SHA512
a03ed80b229232a538206baa9fdbb1681fed0e1bc944412219520119dd3aac4e4afaa626d21e3068680f79803c44ad919370d66a2a6dbfa51f874a6c547ee5c5
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-