General
-
Target
1dbf988be32a5b726b64471a3eda92d7c8bb40414c53a6f8f5b2382ddd42ac56
-
Size
4.5MB
-
Sample
220516-x1q22sdba8
-
MD5
160149ffe7de385c711f621e2a8539c1
-
SHA1
06cc191aa38cedbf4c35f3f7359127e53caca1fd
-
SHA256
1dbf988be32a5b726b64471a3eda92d7c8bb40414c53a6f8f5b2382ddd42ac56
-
SHA512
6770440accb6ef6a38105a9c411892f02657006725cb2e5abb7946ffe3a06c50a0487e4afceb64df804e76c0ab019114845042e8a00469bb70b2056ee4f005d2
Static task
static1
Behavioral task
behavioral1
Sample
1dbf988be32a5b726b64471a3eda92d7c8bb40414c53a6f8f5b2382ddd42ac56.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
1dbf988be32a5b726b64471a3eda92d7c8bb40414c53a6f8f5b2382ddd42ac56
-
Size
4.5MB
-
MD5
160149ffe7de385c711f621e2a8539c1
-
SHA1
06cc191aa38cedbf4c35f3f7359127e53caca1fd
-
SHA256
1dbf988be32a5b726b64471a3eda92d7c8bb40414c53a6f8f5b2382ddd42ac56
-
SHA512
6770440accb6ef6a38105a9c411892f02657006725cb2e5abb7946ffe3a06c50a0487e4afceb64df804e76c0ab019114845042e8a00469bb70b2056ee4f005d2
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-