General
-
Target
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2
-
Size
36KB
-
Sample
220212-mvwegadaej
-
MD5
9c1971ecc1f8eddd522e5a7b52cda59e
-
SHA1
ed0dacc0d8cc62a97a451372a3e97bba14e26b41
-
SHA256
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2
-
SHA512
13d9620335192905320ecbed60aaca0d142884290e83fca2f86062a684fe817e46dcb81c5f23e52684c4e76fe0c55a505e8d8ba69339d50729b58894ad3ac64c
Static task
static1
Behavioral task
behavioral1
Sample
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2.exe
Resource
win10v2004-en-20220112
Malware Config
Targets
-
-
Target
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2
-
Size
36KB
-
MD5
9c1971ecc1f8eddd522e5a7b52cda59e
-
SHA1
ed0dacc0d8cc62a97a451372a3e97bba14e26b41
-
SHA256
061ceec3bf5bbd12b0c7b48aa45583cd1f9f24cdf6b97f6cdef2d1d40f82abe2
-
SHA512
13d9620335192905320ecbed60aaca0d142884290e83fca2f86062a684fe817e46dcb81c5f23e52684c4e76fe0c55a505e8d8ba69339d50729b58894ad3ac64c
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-