General
- Target 0b198a9c8626d3da97de738ed3b11152.exe
- Size 533KB
- Sample220926-kd568sbcbn
- SHA256 d46e663968823798523ece2e0feaeb7d466a1eb1fb579eba4df2fa1d2bf3f734
- MD5 0b198a9c8626d3da97de738ed3b11152
- SHA1 75d31ade268e71c9b007c521d5b46b3f411f3ed4
- SHA512 15a0fc4593452e884f115e767a86427473d34572bcb0fc2564d7f28fe81fbc7c37fb792dc5e331f436e8e84df45db6ea140bee6367e8bf75041b83bc9efe72eb
- SSDEEP 6144:8mNShJFAFanl5ekTOmc+kLWe2Ick3aMc7KLStLtEV8LobS6Hz2XPPnH84nY4cSYp:d65ekT3Tszck3aMc7OALo7HUNY+z
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
0b198a9c8626d3da97de738ed3b11152.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b198a9c8626d3da97de738ed3b11152.exe
Resource
win10v2004-20220901-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0b198a9c8626d3da97de738ed3b11152.exe
- Size 533KB
- SHA256 d46e663968823798523ece2e0feaeb7d466a1eb1fb579eba4df2fa1d2bf3f734
- MD5 0b198a9c8626d3da97de738ed3b11152
- SHA1 75d31ade268e71c9b007c521d5b46b3f411f3ed4
- SHA512 15a0fc4593452e884f115e767a86427473d34572bcb0fc2564d7f28fe81fbc7c37fb792dc5e331f436e8e84df45db6ea140bee6367e8bf75041b83bc9efe72eb
- SSDEEP 6144:8mNShJFAFanl5ekTOmc+kLWe2Ick3aMc7KLStLtEV8LobS6Hz2XPPnH84nY4cSYp:d65ekT3Tszck3aMc7OALo7HUNY+z
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Suspicious use of SetThreadContext