General
-
Target
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb
-
Size
1.3MB
-
Sample
221030-p2vsmabch3
-
MD5
9279b32f202b173bf6945fc22698c613
-
SHA1
5d5c34f9c0490937f843026e241431c692aa9874
-
SHA256
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb
-
SHA512
b70433a2d46bd6da74c5645f43313611ab5e3fa279302c91938a3253f9ea9dea77757f0eba1e678a91e20bebe88dcfd69d3c9503a06f86a9bcfec7b47dca9020
-
SSDEEP
24576:dzeFats8imfuhhBVJu9tRAhnl9SvqE5YfnIRTuALmudy9o/Rz2feCT7p/OsW:DtsEmhhBjuBinOvmfUuACuhJ+B/7W
Static task
static1
Behavioral task
behavioral1
Sample
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb
-
Size
1.3MB
-
MD5
9279b32f202b173bf6945fc22698c613
-
SHA1
5d5c34f9c0490937f843026e241431c692aa9874
-
SHA256
6d24dc95a66c33294110ec4971cd400fc8fbb86e69f7afd0f41223e388285ecb
-
SHA512
b70433a2d46bd6da74c5645f43313611ab5e3fa279302c91938a3253f9ea9dea77757f0eba1e678a91e20bebe88dcfd69d3c9503a06f86a9bcfec7b47dca9020
-
SSDEEP
24576:dzeFats8imfuhhBVJu9tRAhnl9SvqE5YfnIRTuALmudy9o/Rz2feCT7p/OsW:DtsEmhhBjuBinOvmfUuACuhJ+B/7W
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-