General
-
Target
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650
-
Size
992KB
-
Sample
221002-2n9e3sdhd2
-
MD5
6dc2a156ed306ff8b99894acc82b6b1c
-
SHA1
43277d449d307a8aa3108c26b1fd7fb3625b8606
-
SHA256
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650
-
SHA512
c3ec20982f96432df6ab375db1b4cab441865351c5f13b43a20e7c231ab7673d2321134dca5eb4170d8f77248814a40ddf8475da7d1bfd845b90566ac39a3eaf
-
SSDEEP
12288:3rVZaJewWVF5X6I14syva1DP6vFgFBrdSCzUw8hUAGjsxH29/PrSCKpy7L9t8OSI:bVYJeWiy2DUqZKCAH8Hd7LX9S
Static task
static1
Behavioral task
behavioral1
Sample
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650
-
Size
992KB
-
MD5
6dc2a156ed306ff8b99894acc82b6b1c
-
SHA1
43277d449d307a8aa3108c26b1fd7fb3625b8606
-
SHA256
5306a98d3e19f8f5b419e7eedc7a3a067984037144a68536943046c422021650
-
SHA512
c3ec20982f96432df6ab375db1b4cab441865351c5f13b43a20e7c231ab7673d2321134dca5eb4170d8f77248814a40ddf8475da7d1bfd845b90566ac39a3eaf
-
SSDEEP
12288:3rVZaJewWVF5X6I14syva1DP6vFgFBrdSCzUw8hUAGjsxH29/PrSCKpy7L9t8OSI:bVYJeWiy2DUqZKCAH8Hd7LX9S
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-