General
-
Target
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2
-
Size
60KB
-
Sample
220212-lh26taccdm
-
MD5
b1c10b0fef721b061f93fb1a4c376c23
-
SHA1
e2c6d869e34b5ac03156f721a2ac41758d7bbe0f
-
SHA256
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2
-
SHA512
73911ee241d2897e9064693f941844dd90ea365800245fc3ff608366450f0d0b249cf3e734ace0a9091277840c75b165b5327e02a4c687fa852f0a201ddc243b
Static task
static1
Behavioral task
behavioral1
Sample
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2
-
Size
60KB
-
MD5
b1c10b0fef721b061f93fb1a4c376c23
-
SHA1
e2c6d869e34b5ac03156f721a2ac41758d7bbe0f
-
SHA256
09bad2e6b638ac6ea2140ad1146356ce257d84a96508ef8a21b42012e75b83c2
-
SHA512
73911ee241d2897e9064693f941844dd90ea365800245fc3ff608366450f0d0b249cf3e734ace0a9091277840c75b165b5327e02a4c687fa852f0a201ddc243b
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-