General
-
Target
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32
-
Size
28.6MB
-
Sample
220924-2tqvxsdfdk
-
MD5
857194093289f2891651bd09b6c93694
-
SHA1
d63ed5ff8dfe48e7ab94123160bf60cef8161ffd
-
SHA256
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32
-
SHA512
15b8ba4c628e301a13734b81f9cd72d35bac4ef6532ec448e1cd7afc1583997004eb7556e75d3574d6ef639b7859c01bef7c2e2923670bc3cfdcd9392ae92863
-
SSDEEP
786432:XLeeyYMQg9jKQDvywIBKtOlAf/+pxtk5yNCWJK/yI:XLty7QMmQ5I250g5q5Q/V
Static task
static1
Behavioral task
behavioral1
Sample
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32
-
Size
28.6MB
-
MD5
857194093289f2891651bd09b6c93694
-
SHA1
d63ed5ff8dfe48e7ab94123160bf60cef8161ffd
-
SHA256
0e36d0c63a9b9c885c4ba0726380d9812a19ce0bdfa9a82d672f35f693bb7a32
-
SHA512
15b8ba4c628e301a13734b81f9cd72d35bac4ef6532ec448e1cd7afc1583997004eb7556e75d3574d6ef639b7859c01bef7c2e2923670bc3cfdcd9392ae92863
-
SSDEEP
786432:XLeeyYMQg9jKQDvywIBKtOlAf/+pxtk5yNCWJK/yI:XLty7QMmQ5I250g5q5Q/V
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-