General
-
Target
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae
-
Size
60KB
-
Sample
220212-kftafsabc5
-
MD5
0f3230962eb1f4698f2db03c90c25d0b
-
SHA1
d63c6415cbafa4725bd32ef4de65ab0f25231d3f
-
SHA256
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae
-
SHA512
fcb3889c3a3b28efd9e3bce871aef2628326780ff7fe01480d01dd668367a1cd9fe515fd80bf3bca5571b56ecf08184046e4d90e8b666c5fd185e33a96dbe7e8
Static task
static1
Behavioral task
behavioral1
Sample
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae
-
Size
60KB
-
MD5
0f3230962eb1f4698f2db03c90c25d0b
-
SHA1
d63c6415cbafa4725bd32ef4de65ab0f25231d3f
-
SHA256
0ae458ef38cda16a661c514c27a346f7f38b83995e9144d4f5f3bd6a694279ae
-
SHA512
fcb3889c3a3b28efd9e3bce871aef2628326780ff7fe01480d01dd668367a1cd9fe515fd80bf3bca5571b56ecf08184046e4d90e8b666c5fd185e33a96dbe7e8
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-