General
-
Target
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b
-
Size
972KB
-
Sample
220523-z5s4bacafp
-
MD5
334faa99364a54e59a992e52f0401530
-
SHA1
4e484d4fcf5a5be5e307380eec0adeb6ca188149
-
SHA256
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b
-
SHA512
fa18f027e51062ef85bab57380549ac4709e28949c2f74dd6482396fd09d1da35a5bdad21765e45afe44559c21826aa657619f512553444b0086a84ddcb6977b
Static task
static1
Behavioral task
behavioral1
Sample
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b
-
Size
972KB
-
MD5
334faa99364a54e59a992e52f0401530
-
SHA1
4e484d4fcf5a5be5e307380eec0adeb6ca188149
-
SHA256
013455d4d1cfe1e77ae50920bdc03b3474e74962a0adf9b363a2353d4b53f29b
-
SHA512
fa18f027e51062ef85bab57380549ac4709e28949c2f74dd6482396fd09d1da35a5bdad21765e45afe44559c21826aa657619f512553444b0086a84ddcb6977b
Score8/10-
Executes dropped EXE
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-