General
-
Target
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97
-
Size
275KB
-
Sample
221003-n1ybpaedc3
-
MD5
6affc818ad37478d5f06b875742fc9eb
-
SHA1
d151d72586cd4b8629619c90fd2ff8db1aa5717e
-
SHA256
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97
-
SHA512
58826037a94b94345daf17e5f1f864d5f972cdd8071f66284cdc4efe7d3ea920fd4227f3ce58893c14c4cdbc919bc0bc0aa35ce8e8bbdaeae91847ab0829085e
-
SSDEEP
6144:CBKHYmz6mq2pmHmFV2YjnWuwqzeRhvaBAUBZ6IpuZ:d4m5bpnL2KnEqCRhvaFBZ6R
Behavioral task
behavioral1
Sample
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97
-
Size
275KB
-
MD5
6affc818ad37478d5f06b875742fc9eb
-
SHA1
d151d72586cd4b8629619c90fd2ff8db1aa5717e
-
SHA256
1bc279fec5024b996e090a0c91525bebba140dc99702024b76e403e7e56b8f97
-
SHA512
58826037a94b94345daf17e5f1f864d5f972cdd8071f66284cdc4efe7d3ea920fd4227f3ce58893c14c4cdbc919bc0bc0aa35ce8e8bbdaeae91847ab0829085e
-
SSDEEP
6144:CBKHYmz6mq2pmHmFV2YjnWuwqzeRhvaBAUBZ6IpuZ:d4m5bpnL2KnEqCRhvaFBZ6R
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-