General
-
Target
d1b1c43b40ec4108c401c9bf92b3fae8f21e1e9a76c61be3859d37315ac59b36
-
Size
161KB
-
Sample
220524-wvl1gagehr
-
MD5
ce85e89d2dc64adaca5d7998f3987488
-
SHA1
86878cbdde53fc6f69c20b2d746a08d9841095f1
-
SHA256
d1b1c43b40ec4108c401c9bf92b3fae8f21e1e9a76c61be3859d37315ac59b36
-
SHA512
cf1f9f298dd121f50e5e53ac6572aec435682ed0eae650e42b99c40bdc3b4566f2a01a95b5693c019235dd488af270e25a37b7bbdea5b63628f323041708ea85
Static task
static1
Behavioral task
behavioral1
Sample
d1b1c43b40ec4108c401c9bf92b3fae8f21e1e9a76c61be3859d37315ac59b36.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
d1b1c43b40ec4108c401c9bf92b3fae8f21e1e9a76c61be3859d37315ac59b36
-
Size
161KB
-
MD5
ce85e89d2dc64adaca5d7998f3987488
-
SHA1
86878cbdde53fc6f69c20b2d746a08d9841095f1
-
SHA256
d1b1c43b40ec4108c401c9bf92b3fae8f21e1e9a76c61be3859d37315ac59b36
-
SHA512
cf1f9f298dd121f50e5e53ac6572aec435682ed0eae650e42b99c40bdc3b4566f2a01a95b5693c019235dd488af270e25a37b7bbdea5b63628f323041708ea85
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops startup file
-
Loads dropped DLL
-
Drops file in System32 directory
-