General
-
Target
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1
-
Size
873KB
-
Sample
220725-cqc28aafc2
-
MD5
ab562bdc1da3ca961409f742a10b2c69
-
SHA1
26f6d51b36b30066bb2802d47dc58f04e41f45ae
-
SHA256
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1
-
SHA512
66cb18e0dad24ad7d3651b912d4cdd114d32de31ac72c1402143d2c90feab91474bcea59d279e27344ed439f70ea9a47949994fab98b17d15a3675fe6062ef79
Behavioral task
behavioral1
Sample
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1.exe
Resource
win10v2004-20220722-en
Malware Config
Extracted
joker
http://guup.oss-cn-qingdao.aliyuncs.com
https://gutou.oss-cn-beijing.aliyuncs.com
Targets
-
-
Target
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1
-
Size
873KB
-
MD5
ab562bdc1da3ca961409f742a10b2c69
-
SHA1
26f6d51b36b30066bb2802d47dc58f04e41f45ae
-
SHA256
c6b0027b5112f47d4c60a4012376a21a3952dcf518c4d0dd7b61b5e8655342e1
-
SHA512
66cb18e0dad24ad7d3651b912d4cdd114d32de31ac72c1402143d2c90feab91474bcea59d279e27344ed439f70ea9a47949994fab98b17d15a3675fe6062ef79
Score10/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-