General
-
Target
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e
-
Size
4.7MB
-
Sample
220520-1jgntsdhh7
-
MD5
952d19462a8b71553eb09ab55c3e8e4c
-
SHA1
7a905612d16592ea04ba5dc2162950cc00a6cf5e
-
SHA256
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e
-
SHA512
052b38fd607334c167e835a872413ae0c09cdbf5c778f2d391067b50849c9e4260f54aec6dc9c2fcb5a3efd88cfdb2581fef1533e82ae74062a517f4d6dcb569
Static task
static1
Behavioral task
behavioral1
Sample
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e
-
Size
4.7MB
-
MD5
952d19462a8b71553eb09ab55c3e8e4c
-
SHA1
7a905612d16592ea04ba5dc2162950cc00a6cf5e
-
SHA256
8a3811e5ccbc31361ebcf1451d69e406952f43c133779b0c25746fe5005eff9e
-
SHA512
052b38fd607334c167e835a872413ae0c09cdbf5c778f2d391067b50849c9e4260f54aec6dc9c2fcb5a3efd88cfdb2581fef1533e82ae74062a517f4d6dcb569
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-