General
-
Target
5a029e225cd1e877ac6907bac15b0d9ca8a523d8641c40b56c7e06959f2285bf
-
Size
817KB
-
Sample
220724-z85lhsghf7
-
MD5
d116cabcc0df469b1b968374ce32167d
-
SHA1
0d4de96b5da6f27836fd217ac5986ad22b440576
-
SHA256
5a029e225cd1e877ac6907bac15b0d9ca8a523d8641c40b56c7e06959f2285bf
-
SHA512
fd99b0827f9f5d04ec55d4880454841842ad089f20b770471e19253b05b488abd5d6d320ecb42627eeb30f3e03ef7c6dec2665770cbac0ee594ce4ecec81f0ab
Static task
static1
Behavioral task
behavioral1
Sample
5a029e225cd1e877ac6907bac15b0d9ca8a523d8641c40b56c7e06959f2285bf.exe
Resource
win7-20220715-en
Malware Config
Targets
-
-
Target
5a029e225cd1e877ac6907bac15b0d9ca8a523d8641c40b56c7e06959f2285bf
-
Size
817KB
-
MD5
d116cabcc0df469b1b968374ce32167d
-
SHA1
0d4de96b5da6f27836fd217ac5986ad22b440576
-
SHA256
5a029e225cd1e877ac6907bac15b0d9ca8a523d8641c40b56c7e06959f2285bf
-
SHA512
fd99b0827f9f5d04ec55d4880454841842ad089f20b770471e19253b05b488abd5d6d320ecb42627eeb30f3e03ef7c6dec2665770cbac0ee594ce4ecec81f0ab
-
Trickbot x86 loader
Detected Trickbot's x86 loader that unpacks the x86 payload.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-