General
-
Target
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd
-
Size
275KB
-
Sample
221003-n1v7bsedb7
-
MD5
59e866425c12ba3fd6c15830ecc1f053
-
SHA1
1c70693755be5bb8efa2afa52b5a4c49b9457f5a
-
SHA256
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd
-
SHA512
6e86e5b65e1de096f7f6283a336c302350b0b0d522826ffe40bcaa7527df4a5645d56d4cc0f8865daebfe77cbc04261f4b5eb144793234c363bef7e541c6eb25
-
SSDEEP
6144:dBKHYmz6mq2pmHmFV2YjnWuwqzeRhvav/z9QMP:64m5bpnL2KnEqCRhvavBQs
Behavioral task
behavioral1
Sample
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd
-
Size
275KB
-
MD5
59e866425c12ba3fd6c15830ecc1f053
-
SHA1
1c70693755be5bb8efa2afa52b5a4c49b9457f5a
-
SHA256
220b7bc493f6c889f20f42ec2dd811be0385b2233d3fcb64e23da713df917bbd
-
SHA512
6e86e5b65e1de096f7f6283a336c302350b0b0d522826ffe40bcaa7527df4a5645d56d4cc0f8865daebfe77cbc04261f4b5eb144793234c363bef7e541c6eb25
-
SSDEEP
6144:dBKHYmz6mq2pmHmFV2YjnWuwqzeRhvav/z9QMP:64m5bpnL2KnEqCRhvavBQs
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-