General
- Target 226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54
- Size 4.1MB
- Sample221031-2t9yssehap
- SHA256 226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54
- MD5 5399ff9c8181e7600a5d20b9521f8ef6
- SHA1 2956df5c6bdab3e9c6bf2f17f6712943d2c4533a
- SHA512 d4ab3b67dcf604eda4b948643e6a3c10b56372e1a8ef74fd5e567c04a01de979ff505c2b2cb3b882b50ccb88e31b613a3207b10468e4016f2f78fa4f9737e88b
- SSDEEP 98304:Xl4CN9s4aaJ6JiTzYOtN1yMRH74VGjbDoLoq+SXfSX:Vh5JqiTzL1yMPq/XfSX
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Behavioral task
behavioral1
Sample
226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54.exe
Resource
win7-20220901-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54.exe
Resource
win10v2004-20220812-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54
- Size 4.1MB
- SHA256 226e6bd65f3b4c849f0187975780958a6cad49bb21d2d1e5a3c8897506f37d54
- MD5 5399ff9c8181e7600a5d20b9521f8ef6
- SHA1 2956df5c6bdab3e9c6bf2f17f6712943d2c4533a
- SHA512 d4ab3b67dcf604eda4b948643e6a3c10b56372e1a8ef74fd5e567c04a01de979ff505c2b2cb3b882b50ccb88e31b613a3207b10468e4016f2f78fa4f9737e88b
- SSDEEP 98304:Xl4CN9s4aaJ6JiTzYOtN1yMRH74VGjbDoLoq+SXfSX:Vh5JqiTzL1yMPq/XfSX
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Sets service image path in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.