Resubmissions
21-08-2022 14:53
220821-r9e39aahej 820-08-2022 19:34
220820-yajeysada3 818-08-2022 19:56
220818-ynvp5seac3 814-08-2022 21:38
220814-1hgbnsddf5 818-07-2022 04:40
220718-fajfvaafdl 118-07-2022 04:26
220718-e2lvlsaegj 816-07-2022 04:29
220716-e4rtmsgeg3 816-07-2022 03:58
220716-ejzczsgde2 811-07-2022 19:19
220711-x1h2facabn 1010-07-2022 23:55
220710-3yffesdfan 10Static task
static1
URLScan task
urlscan1
Malware Config
Targets
-
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Modifies file permissions
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-