General
-
Target
SEPAgent.exe
-
Size
40.1MB
-
Sample
220503-jysafafeen
-
MD5
af6f73b416a773fa91f61297290e2075
-
SHA1
4f09ce94716d7d202d1796f81b4946743a433290
-
SHA256
dc066e7868eeceb3941d836e88da4ef81120006603ec5ed81ea82a53a81685d4
-
SHA512
df7f989059afe2509edcd34bf896928f16560f872e24adf4e3d53731257abfb9408bcaefa7fc13002b4aebb64d5cae1a2d5de5d80552872d7b40e54e5ec81ba2
Static task
static1
Behavioral task
behavioral1
Sample
SEPAgent.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
SEPAgent.exe
-
Size
40.1MB
-
MD5
af6f73b416a773fa91f61297290e2075
-
SHA1
4f09ce94716d7d202d1796f81b4946743a433290
-
SHA256
dc066e7868eeceb3941d836e88da4ef81120006603ec5ed81ea82a53a81685d4
-
SHA512
df7f989059afe2509edcd34bf896928f16560f872e24adf4e3d53731257abfb9408bcaefa7fc13002b4aebb64d5cae1a2d5de5d80552872d7b40e54e5ec81ba2
-
Registers COM server for autorun
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-