General
-
Target
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77
-
Size
135KB
-
Sample
221002-2ng1tsfcfl
-
MD5
65d193806019522a1a22588270b051c4
-
SHA1
e80b2e0aff643847e2271f2b6bc111f037f66cdd
-
SHA256
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77
-
SHA512
b22f040207ee99be792f448b9c384de353216f0a40d9ac8da42c1fca7263194bb7a9f4ee8378d2f1613948e817253cda05616bb95d9d89dcdb3cb38938726599
-
SSDEEP
3072:QHdVykKI3dYK/+83cVSkZCLnkRtPEHma1GYk8lyUUSlL1EAiQslDD8R7Ck:QaidCFrCmtPhAkMbLanQYAE
Static task
static1
Behavioral task
behavioral1
Sample
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77
-
Size
135KB
-
MD5
65d193806019522a1a22588270b051c4
-
SHA1
e80b2e0aff643847e2271f2b6bc111f037f66cdd
-
SHA256
b921fa6a2620ab5e3832399fae8e1ce41b6b1b0ba41a886c7bcbc503b3deda77
-
SHA512
b22f040207ee99be792f448b9c384de353216f0a40d9ac8da42c1fca7263194bb7a9f4ee8378d2f1613948e817253cda05616bb95d9d89dcdb3cb38938726599
-
SSDEEP
3072:QHdVykKI3dYK/+83cVSkZCLnkRtPEHma1GYk8lyUUSlL1EAiQslDD8R7Ck:QaidCFrCmtPhAkMbLanQYAE
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-