General
- Target c5ba2308ef1f4c2735f61c249076622d.exe
- Size 605KB
- Sample220428-gw2d8abbc9
- SHA256 beedb7cc465933bc983dab4c41f8464d985ec15680f60dec4f27e0a96e88939d
- MD5 c5ba2308ef1f4c2735f61c249076622d
- SHA1 1713c1dfb2add36157e80eaf162a0f0f5a3d7f16
- SHA512 432d41929caabc61d12580240eb2da2c032cfe20242b384a683e0038bbdd02a0b99ecf70779f2df43f2e63ba111830846987076f1ed87820c3848bfcca0ed523
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
c5ba2308ef1f4c2735f61c249076622d.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
c5ba2308ef1f4c2735f61c249076622d.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target c5ba2308ef1f4c2735f61c249076622d.exe
- Size 605KB
- SHA256 beedb7cc465933bc983dab4c41f8464d985ec15680f60dec4f27e0a96e88939d
- MD5 c5ba2308ef1f4c2735f61c249076622d
- SHA1 1713c1dfb2add36157e80eaf162a0f0f5a3d7f16
- SHA512 432d41929caabc61d12580240eb2da2c032cfe20242b384a683e0038bbdd02a0b99ecf70779f2df43f2e63ba111830846987076f1ed87820c3848bfcca0ed523
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.