General
-
Target
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192
-
Size
19.9MB
-
Sample
220622-kgxz2abhbk
-
MD5
37329c83aebbf06e22fb641d6606cdb0
-
SHA1
8cf703ed22116f4857e6284e06ec820641a8fdc6
-
SHA256
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192
-
SHA512
ca69bcab7c05c8daff9e0a0c6669e38d834153abf75d3afd5c862482689fc64432a4a984a7edfb715c918f37016074a622fa242b96816d9f70187eca285a9347
Static task
static1
Behavioral task
behavioral1
Sample
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192
-
Size
19.9MB
-
MD5
37329c83aebbf06e22fb641d6606cdb0
-
SHA1
8cf703ed22116f4857e6284e06ec820641a8fdc6
-
SHA256
2e6f97e72d6d24a6499998913698dccb50d48617cf5cf5ad49474dbc4dcfd192
-
SHA512
ca69bcab7c05c8daff9e0a0c6669e38d834153abf75d3afd5c862482689fc64432a4a984a7edfb715c918f37016074a622fa242b96816d9f70187eca285a9347
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-