General
- Target f9482bb02601f897d980e64e4b54fe3c.exe
- Size 10KB
- Sample221015-g52rcafcd8
- SHA256 a20d62110e3e9d2659ee55299033ff3542bdce0b669f299dad18dddce4ddc1af
- MD5 f9482bb02601f897d980e64e4b54fe3c
- SHA1 bbaf763d8b26f468f6d4fb5cb631e3fedb3c965b
- SHA512 f0b2dcb4403d6b709a327fdf3533ff80272ccf4618e094fa7727564d0f47cf83cff2568615c331062c4b21fa21755b62c88acea466ac96627aeba120244a9d6d
- SSDEEP 192:ZBlbXZH5KcyeRrUt0cgh8/2PnH/7AvBp:ZBkurM05S/2vHzM
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
f9482bb02601f897d980e64e4b54fe3c.exe
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9482bb02601f897d980e64e4b54fe3c.exe
Resource
win10v2004-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target f9482bb02601f897d980e64e4b54fe3c.exe
- Size 10KB
- SHA256 a20d62110e3e9d2659ee55299033ff3542bdce0b669f299dad18dddce4ddc1af
- MD5 f9482bb02601f897d980e64e4b54fe3c
- SHA1 bbaf763d8b26f468f6d4fb5cb631e3fedb3c965b
- SHA512 f0b2dcb4403d6b709a327fdf3533ff80272ccf4618e094fa7727564d0f47cf83cff2568615c331062c4b21fa21755b62c88acea466ac96627aeba120244a9d6d
- SSDEEP 192:ZBlbXZH5KcyeRrUt0cgh8/2PnH/7AvBp:ZBkurM05S/2vHzM
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext