General
- Target adobe-updater.exe
- Size 934KB
- Sample220802-1z2zpsddan
- SHA256 f333b87b79d0fbf142976bb401a082f189b00c49e65a3ad7b1ed5b8f33320ba0
- MD5 4a472a1e7caacc94be6c4e2429b90132
- SHA1 ff85dc89600f7d9e1dcf8377559d7833e1a61315
- SHA512 502a3c61dbb2cd0990c7c9188cdaa67692babd212e22f9b5501422443dd6a2ad446801590c92537d2abf52f9010956ea92538d01e929b9d331d2cb5fe80aa069
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
adobe-updater.exe
Resource
win7-20220718-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
adobe-updater.exe
Resource
win10v2004-20220721-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target adobe-updater.exe
- Size 934KB
- SHA256 f333b87b79d0fbf142976bb401a082f189b00c49e65a3ad7b1ed5b8f33320ba0
- MD5 4a472a1e7caacc94be6c4e2429b90132
- SHA1 ff85dc89600f7d9e1dcf8377559d7833e1a61315
- SHA512 502a3c61dbb2cd0990c7c9188cdaa67692babd212e22f9b5501422443dd6a2ad446801590c92537d2abf52f9010956ea92538d01e929b9d331d2cb5fe80aa069
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Suspicious use of SetThreadContext