General
-
Target
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04
-
Size
36KB
-
Sample
220212-nehn4sbfe7
-
MD5
19fd69cf4dcf05cd01379e5c75e38f77
-
SHA1
5bceb08d1988271e40d070325958b0f427de6456
-
SHA256
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04
-
SHA512
30aea904696b06bfbf4afe5b5d8c74c80217178f8e38e595e36d26d9e8d0e91c64c09e6422b1a4875f3f447f69e8fac1166e6aec5ee2c78fecd5b26cd6f841e3
Static task
static1
Behavioral task
behavioral1
Sample
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04
-
Size
36KB
-
MD5
19fd69cf4dcf05cd01379e5c75e38f77
-
SHA1
5bceb08d1988271e40d070325958b0f427de6456
-
SHA256
04bba2338397e53ff15b8e0ad9831db81e9aab78e3709c69bc1df14b35ebef04
-
SHA512
30aea904696b06bfbf4afe5b5d8c74c80217178f8e38e595e36d26d9e8d0e91c64c09e6422b1a4875f3f447f69e8fac1166e6aec5ee2c78fecd5b26cd6f841e3
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-