General
-
Target
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a
-
Size
58KB
-
Sample
220212-mrj72adaar
-
MD5
739069781ec99595ff16f0eaa986d725
-
SHA1
11bc0bf2ea50ede9014aeceb200e8bfa44588d7c
-
SHA256
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a
-
SHA512
678410707ddd54f7d6565859ac567c856a29b405ca3b2f937fe20bf1758f66e42794166766f7053ee7db0c842094db1df03885c2eeb8b742bec09db168f2ce27
Static task
static1
Behavioral task
behavioral1
Sample
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a
-
Size
58KB
-
MD5
739069781ec99595ff16f0eaa986d725
-
SHA1
11bc0bf2ea50ede9014aeceb200e8bfa44588d7c
-
SHA256
0664cc70ec0bccce4826824b3dfdff794d7f8041b95f29d61021eebd902df64a
-
SHA512
678410707ddd54f7d6565859ac567c856a29b405ca3b2f937fe20bf1758f66e42794166766f7053ee7db0c842094db1df03885c2eeb8b742bec09db168f2ce27
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-