General
-
Target
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975
-
Size
43KB
-
Sample
221002-2n53nadhc8
-
MD5
6c6933be90e03518c08380a58c015924
-
SHA1
34b0a0eea1cb5501bd9ca836a1206eee827bf7cf
-
SHA256
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975
-
SHA512
bd8dbfa5d07749cc141ac1ae6cb9571051359c0cd63b2e6091d1f38952084b2f169c4cc3c05c83ff8306ff21d18612b7d17b2dcabf3f436d6f6a59c5e37aa017
-
SSDEEP
768:JowFb8OPu19SIo6zcrq92T62cf5s1q6HCjH+Gqvt21mls514B4yiNvMelv0HCCjm:h+2rNTqqivk4yiHl8HCCrk
Static task
static1
Behavioral task
behavioral1
Sample
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975
-
Size
43KB
-
MD5
6c6933be90e03518c08380a58c015924
-
SHA1
34b0a0eea1cb5501bd9ca836a1206eee827bf7cf
-
SHA256
bfb37aa9dc260c37ae67eddd6a9b00cd281b93543027fa4a8efb6f1d366ec975
-
SHA512
bd8dbfa5d07749cc141ac1ae6cb9571051359c0cd63b2e6091d1f38952084b2f169c4cc3c05c83ff8306ff21d18612b7d17b2dcabf3f436d6f6a59c5e37aa017
-
SSDEEP
768:JowFb8OPu19SIo6zcrq92T62cf5s1q6HCjH+Gqvt21mls514B4yiNvMelv0HCCjm:h+2rNTqqivk4yiHl8HCCrk
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-