General
-
Target
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c
-
Size
60KB
-
Sample
220212-l5swnabab2
-
MD5
a5c2e9bfea2ee3e7667a87cf86842ff0
-
SHA1
ce898f60803c1e7b6b70ff19e6a48b89016c7eb9
-
SHA256
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c
-
SHA512
4951d309b036d1217617e08f11d1a1df82206255f6849aeff123f565bf1f4902307b934f075eeb3d9fb7aeac758459eea8cd7b3b34f52c28b5a8b2c485339d08
Static task
static1
Behavioral task
behavioral1
Sample
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c
-
Size
60KB
-
MD5
a5c2e9bfea2ee3e7667a87cf86842ff0
-
SHA1
ce898f60803c1e7b6b70ff19e6a48b89016c7eb9
-
SHA256
0811067a8205dd6adab37631fd801d2fe2941c54a2d13153e595cab7dbcd027c
-
SHA512
4951d309b036d1217617e08f11d1a1df82206255f6849aeff123f565bf1f4902307b934f075eeb3d9fb7aeac758459eea8cd7b3b34f52c28b5a8b2c485339d08
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-