General
-
Target
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b.exe
-
Size
456KB
-
Sample
220521-yh5yxsgchq
-
MD5
0ce6472a1caf1e18f0c87c6f405c6441
-
SHA1
d6f0f1a7cfb43cadeace56f7624e3ca91bb46b8f
-
SHA256
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b
-
SHA512
5398f90b48a360f3ee4b8e5668f561fea209abdbdd426e58617d498257a4a204fb7a2687a771f1d907c3adee4b03511bb459ae6acec2401f6adf257a2e9be510
Static task
static1
Behavioral task
behavioral1
Sample
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b.exe
-
Size
456KB
-
MD5
0ce6472a1caf1e18f0c87c6f405c6441
-
SHA1
d6f0f1a7cfb43cadeace56f7624e3ca91bb46b8f
-
SHA256
db1499fa5ea0d7bc198609ef58218e8c95a63e19a4c59bcd5f6e81a0439beb1b
-
SHA512
5398f90b48a360f3ee4b8e5668f561fea209abdbdd426e58617d498257a4a204fb7a2687a771f1d907c3adee4b03511bb459ae6acec2401f6adf257a2e9be510
Score10/10-
suricata: ET MALWARE Observed BlackGuard_v2 Domain (umpulumpu .ru) in TLS SNI
suricata: ET MALWARE Observed BlackGuard_v2 Domain (umpulumpu .ru) in TLS SNI
-
suricata: ET MALWARE Observed BlackGuard_v2 Domain in DNS Lookup (umpulumpu .ru)
suricata: ET MALWARE Observed BlackGuard_v2 Domain in DNS Lookup (umpulumpu .ru)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-