General
- Target notice.exe
- Size 350.0MB
- Sample220331-tpjxtaafcp
- SHA256 f644bef519fc0243633d13f18c97c96d76b95b6f2cbad2a2507fb8177b7e4d1d
- MD5 e74116c5efc7492fa74334a39e22afe8
- SHA1 393e81a3d525e8b582355d855d2c367047e4e0b0
- SHA512 64999f89597bed1857252b98ffd03fba27c9514af0fb430de3913a58e035d619823bcb45a4aa5ec89abdf807f89f9db57d3856e97885144992d03804d79a2352
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
notice.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Targets
-
- Target notice.exe
- Size 350.0MB
- SHA256 f644bef519fc0243633d13f18c97c96d76b95b6f2cbad2a2507fb8177b7e4d1d
- MD5 e74116c5efc7492fa74334a39e22afe8
- SHA1 393e81a3d525e8b582355d855d2c367047e4e0b0
- SHA512 64999f89597bed1857252b98ffd03fba27c9514af0fb430de3913a58e035d619823bcb45a4aa5ec89abdf807f89f9db57d3856e97885144992d03804d79a2352
- MD5 SHA1 SHA512
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext