General
-
Target
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d
-
Size
9.4MB
-
Sample
220521-xarwnabcg7
-
MD5
ba422a4872c96c11750ad2e27b10c76f
-
SHA1
af3016b0a983ff753ce15bc963da1ba412cf0567
-
SHA256
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d
-
SHA512
ed4ec3d6f45b46524d60f1d39418208bd890d60df36aa47348bad72bb46f29e749c829c93a552e2f53c1d7cb60813947759891ddd8b2696f65afa2ca720e471c
Static task
static1
Behavioral task
behavioral1
Sample
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d
-
Size
9.4MB
-
MD5
ba422a4872c96c11750ad2e27b10c76f
-
SHA1
af3016b0a983ff753ce15bc963da1ba412cf0567
-
SHA256
e5a2c3bbb2aaddeeb92588bb899887c5d64f2cbc00dfe4b15afceb8f39dda04d
-
SHA512
ed4ec3d6f45b46524d60f1d39418208bd890d60df36aa47348bad72bb46f29e749c829c93a552e2f53c1d7cb60813947759891ddd8b2696f65afa2ca720e471c
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops startup file
-
Loads dropped DLL
-