General
-
Target
f2343d2bebc9ea78fbc4be3929606e25c2df947f22c73c9d5ec29bf4e52a919b
-
Size
6.1MB
-
Sample
220524-q9dprahaap
-
MD5
282be419787a2375dd806067548e5338
-
SHA1
4d381c8c47e79ded07ce9eae609d71a5440cce14
-
SHA256
f2343d2bebc9ea78fbc4be3929606e25c2df947f22c73c9d5ec29bf4e52a919b
-
SHA512
c481537d9b019516182dc686bd0a5edb130284292cb2bf9a37341a8dcd634fa582c9a99a87b5231a57a5568e91d861b65873b255116b54393f7c5c7d34a7f9aa
Static task
static1
Behavioral task
behavioral1
Sample
f2343d2bebc9ea78fbc4be3929606e25c2df947f22c73c9d5ec29bf4e52a919b.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
f2343d2bebc9ea78fbc4be3929606e25c2df947f22c73c9d5ec29bf4e52a919b
-
Size
6.1MB
-
MD5
282be419787a2375dd806067548e5338
-
SHA1
4d381c8c47e79ded07ce9eae609d71a5440cce14
-
SHA256
f2343d2bebc9ea78fbc4be3929606e25c2df947f22c73c9d5ec29bf4e52a919b
-
SHA512
c481537d9b019516182dc686bd0a5edb130284292cb2bf9a37341a8dcd634fa582c9a99a87b5231a57a5568e91d861b65873b255116b54393f7c5c7d34a7f9aa
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-