General
- Target 568f70f7d46906254927539c8167977f.exe
- Size 64KB
- Sample221006-nnad4ahdfp
- SHA256 e8b057817c2bbda7191f4b4e53b913caff6f2cbda1a0cbf68f32e2f4d45f1c42
- MD5 568f70f7d46906254927539c8167977f
- SHA1 0efa8d6e36d7969d73f609b8d1cb6d587d695473
- SHA512 b4f5816128fc1ba4877fcc443036d1756fc8016f2684a167a8cf50216eafb0b90599830000b5dfa97a12fd05c6f7295ca5739ff543267361dd5258b636475c64
- SSDEEP 1536:4/uHgcQJvRcw9KP+ldM3C3f9GxZO5z2B8GFEYo:2yQzM6kxS
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
568f70f7d46906254927539c8167977f.exe
Resource
win7-20220901-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
568f70f7d46906254927539c8167977f.exe
Resource
win10v2004-20220812-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 568f70f7d46906254927539c8167977f.exe
- Size 64KB
- SHA256 e8b057817c2bbda7191f4b4e53b913caff6f2cbda1a0cbf68f32e2f4d45f1c42
- MD5 568f70f7d46906254927539c8167977f
- SHA1 0efa8d6e36d7969d73f609b8d1cb6d587d695473
- SHA512 b4f5816128fc1ba4877fcc443036d1756fc8016f2684a167a8cf50216eafb0b90599830000b5dfa97a12fd05c6f7295ca5739ff543267361dd5258b636475c64
- SSDEEP 1536:4/uHgcQJvRcw9KP+ldM3C3f9GxZO5z2B8GFEYo:2yQzM6kxS
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext