General
- Target SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
- Size 8KB
- Sample221013-17x1qagcf7
- SHA256 cb05606b742226130a4e421b47b04bee21b4da79bb883c15a3c6a9002d8dfa7d
- MD5 a93394c0d7a32e0ae2ba43a6fd881301
- SHA1 b7c51ec181c8751f752e14dba96132a83eeaa7a8
- SHA512 1645bbfd918c73b7578e0eef6369c71f88c147391eb5e32a2cef7e8171f88008689602da8eb29edf051119dc01174a0c84d8bb2d464b087db769335dc8dcd926
- SSDEEP 192:WKeCtTNUT/09Lu/qmJQ9UkL7LoLJ5hPHf+ND:WKxNUTc9Lu/pJQykL7LoLhf+N
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
Resource
win7-20220812-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
Resource
win10v2004-20220901-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target SecuriteInfo.com.Win32.DropperX-gen.785.24355.exe
- Size 8KB
- SHA256 cb05606b742226130a4e421b47b04bee21b4da79bb883c15a3c6a9002d8dfa7d
- MD5 a93394c0d7a32e0ae2ba43a6fd881301
- SHA1 b7c51ec181c8751f752e14dba96132a83eeaa7a8
- SHA512 1645bbfd918c73b7578e0eef6369c71f88c147391eb5e32a2cef7e8171f88008689602da8eb29edf051119dc01174a0c84d8bb2d464b087db769335dc8dcd926
- SSDEEP 192:WKeCtTNUT/09Lu/qmJQ9UkL7LoLJ5hPHf+ND:WKxNUTc9Lu/pJQykL7LoLhf+N
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Adds Run key to start application
-
Suspicious use of SetThreadContext