General
-
Target
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc
-
Size
58KB
-
Sample
220212-nqmr7sdecr
-
MD5
26823ea011623ea7851169dd20746e04
-
SHA1
5cd0b5dde5bbb08a2eeb25a3e7067a31c04f3d64
-
SHA256
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc
-
SHA512
ec72681d347176f2dbb0f27a5d1dfa83bc74168f20c4f59da9be7bbffff8ffe707082da1d8e2b8508e2f90dffc818fcb38015efda54c91fbcfeb3b1c80e63ff2
Static task
static1
Behavioral task
behavioral1
Sample
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc.exe
Resource
win7-en-20211208
Behavioral task
behavioral2
Sample
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc.exe
Resource
win10v2004-en-20220113
Malware Config
Targets
-
-
Target
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc
-
Size
58KB
-
MD5
26823ea011623ea7851169dd20746e04
-
SHA1
5cd0b5dde5bbb08a2eeb25a3e7067a31c04f3d64
-
SHA256
03f712f624ef7698e33fdb9c9b049fd0f3f8e03f7063f74e18ce8ff2aea820cc
-
SHA512
ec72681d347176f2dbb0f27a5d1dfa83bc74168f20c4f59da9be7bbffff8ffe707082da1d8e2b8508e2f90dffc818fcb38015efda54c91fbcfeb3b1c80e63ff2
Score10/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-