General
-
Target
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414
-
Size
657KB
-
Sample
221003-hdx5hsdbgl
-
MD5
f1fb157ce9b7c6d4aef539fe915e8ee5
-
SHA1
1a3b96d6f33726c97da8d0c148662a5066d4c400
-
SHA256
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414
-
SHA512
83120c27a5503003a19a4a696bcfd9fc4af5968b94d70f5f5410c5313e048cea71eb4b687b508f767ddca032f17b343b7d8e6ea169101ef41b329c0b540315b2
-
SSDEEP
12288:K/iSu68aZ2NHx8eBPh7VwwsaTyItetooaUt788+PJ2Cwwa7z:K/imXY5CeBkKM/ar1J2hwY
Static task
static1
Behavioral task
behavioral1
Sample
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414
-
Size
657KB
-
MD5
f1fb157ce9b7c6d4aef539fe915e8ee5
-
SHA1
1a3b96d6f33726c97da8d0c148662a5066d4c400
-
SHA256
416bccea325ef89df8d6bcbaa8c8e8d2a00f0b505b8a998e70ff2524a9c56414
-
SHA512
83120c27a5503003a19a4a696bcfd9fc4af5968b94d70f5f5410c5313e048cea71eb4b687b508f767ddca032f17b343b7d8e6ea169101ef41b329c0b540315b2
-
SSDEEP
12288:K/iSu68aZ2NHx8eBPh7VwwsaTyItetooaUt788+PJ2Cwwa7z:K/imXY5CeBkKM/ar1J2hwY
Score10/10-
Modifies system executable filetype association
-
Blocklisted process makes network request
-
Creates new service(s)
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Registers COM server for autorun
-
Sets file execution options in registry
-
Stops running service(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-