General
-
Target
0a90fcb89e5c36783d14359dfd0d2462.exe
-
Size
2.9MB
-
Sample
220411-h3sw4aedg9
-
MD5
0a90fcb89e5c36783d14359dfd0d2462
-
SHA1
2ff0e1a4c591dfc6182c4f58209ae02210abff86
-
SHA256
09bbc753aa0ac277e42418b81587e1362c5dea6798432b3f589f0dae187d7953
-
SHA512
bf043ddd6c6c4ac363d4f62399be6eb396f6f8ece8310cd4164eaf7109a62c5e44b7f2a3e1eb75f47f8c11942dc7a47f25680f6ffd4314212f563dcea0f46b81
Static task
static1
Behavioral task
behavioral1
Sample
0a90fcb89e5c36783d14359dfd0d2462.exe
Resource
win7-20220311-en
Malware Config
Targets
-
-
Target
0a90fcb89e5c36783d14359dfd0d2462.exe
-
Size
2.9MB
-
MD5
0a90fcb89e5c36783d14359dfd0d2462
-
SHA1
2ff0e1a4c591dfc6182c4f58209ae02210abff86
-
SHA256
09bbc753aa0ac277e42418b81587e1362c5dea6798432b3f589f0dae187d7953
-
SHA512
bf043ddd6c6c4ac363d4f62399be6eb396f6f8ece8310cd4164eaf7109a62c5e44b7f2a3e1eb75f47f8c11942dc7a47f25680f6ffd4314212f563dcea0f46b81
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2
-