General
-
Target
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901
-
Size
3.2MB
-
Sample
220725-cv7sdsbagl
-
MD5
51eb93aaca0e50e7623ab67c61d1b1fb
-
SHA1
c862db8b0d8a15b02e3cb3296aa618c46edc822b
-
SHA256
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901
-
SHA512
e31728d6b1fd9781a0d29840d054b6e3f1869db40b185d74b8f2e4fbea526b712e3ee614784fba9ccf78d532ea3640885ee5b0e1a2793aa27da9dbea6d99af0a
Behavioral task
behavioral1
Sample
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901.exe
Resource
win7-20220718-en
Behavioral task
behavioral2
Sample
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901.exe
Resource
win10v2004-20220721-en
Malware Config
Targets
-
-
Target
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901
-
Size
3.2MB
-
MD5
51eb93aaca0e50e7623ab67c61d1b1fb
-
SHA1
c862db8b0d8a15b02e3cb3296aa618c46edc822b
-
SHA256
0041d6ff578994fd2d6d9aa0b44c0d5f5474eb5281c49a34f4c81651a4525901
-
SHA512
e31728d6b1fd9781a0d29840d054b6e3f1869db40b185d74b8f2e4fbea526b712e3ee614784fba9ccf78d532ea3640885ee5b0e1a2793aa27da9dbea6d99af0a
Score10/10-
suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
suricata: ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-