General
-
Target
file.exe
-
Size
7.3MB
-
Sample
220925-1xscgshdhq
-
MD5
a9e866716bd75aeaa428b57cb48e45dd
-
SHA1
c5c6097bca0945374f28ba060d99b9ca909e3578
-
SHA256
280fef42d744b631b3b5002defd4a954bfb86cbd1c42c712be3a4d2eb9a05b51
-
SHA512
e8ead6ac4e03d1ce7b428b93f9ab89e8fd65df670dae1600833f56c924c2c3d60e5a59b6c1916a7ab5a35731d7fcc03a42bd4a88d3cc06f88adf28a136bbfb10
-
SSDEEP
98304:91OhMHtbvQM0VVC17zLp5MxG6pkJ0/fMueTTlRzxpI+fysy/4bQk7sVyz4od0aui:91OgFnYCKxG0HpeTnzxhfWZLDu
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
file.exe
-
Size
7.3MB
-
MD5
a9e866716bd75aeaa428b57cb48e45dd
-
SHA1
c5c6097bca0945374f28ba060d99b9ca909e3578
-
SHA256
280fef42d744b631b3b5002defd4a954bfb86cbd1c42c712be3a4d2eb9a05b51
-
SHA512
e8ead6ac4e03d1ce7b428b93f9ab89e8fd65df670dae1600833f56c924c2c3d60e5a59b6c1916a7ab5a35731d7fcc03a42bd4a88d3cc06f88adf28a136bbfb10
-
SSDEEP
98304:91OhMHtbvQM0VVC17zLp5MxG6pkJ0/fMueTTlRzxpI+fysy/4bQk7sVyz4od0aui:91OgFnYCKxG0HpeTnzxhfWZLDu
-
Blocklisted process makes network request
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-