General
-
Target
0cbb70c2ee329589940ec4b1ce78e73185e6857af62081ee83787bf4ea5e77a3
-
Size
632KB
-
Sample
220529-2x47qahbbm
-
MD5
4dd7a26552e9885481101516d4300f70
-
SHA1
cdfde185559ef63a1b206bc652ac1b29824a29e9
-
SHA256
0cbb70c2ee329589940ec4b1ce78e73185e6857af62081ee83787bf4ea5e77a3
-
SHA512
3152b97b85af9e4158a8dd9e27a02d39b90814d43dcd2bfe55706a80c202494bc26faf263800678954b72722cf45c36829eb63929dbde6031beb9dd682a932bc
Static task
static1
Behavioral task
behavioral1
Sample
0cbb70c2ee329589940ec4b1ce78e73185e6857af62081ee83787bf4ea5e77a3.exe
Resource
win7-20220414-en
Malware Config
Targets
-
-
Target
0cbb70c2ee329589940ec4b1ce78e73185e6857af62081ee83787bf4ea5e77a3
-
Size
632KB
-
MD5
4dd7a26552e9885481101516d4300f70
-
SHA1
cdfde185559ef63a1b206bc652ac1b29824a29e9
-
SHA256
0cbb70c2ee329589940ec4b1ce78e73185e6857af62081ee83787bf4ea5e77a3
-
SHA512
3152b97b85af9e4158a8dd9e27a02d39b90814d43dcd2bfe55706a80c202494bc26faf263800678954b72722cf45c36829eb63929dbde6031beb9dd682a932bc
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-