General
-
Target
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c
-
Size
396KB
-
Sample
221106-s8hneshgf8
-
MD5
05b6ea278fb80714e40a273c768b0260
-
SHA1
1a05c7b77a986b6eb8ac3fb939a9418268b4371d
-
SHA256
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c
-
SHA512
c9e72bc4e2c8f3fdc0747976bb498867732d09306cccb5cb1744e6abe6b9f2043b0a3c7aad8cc9ca3337a4270c6f9867ba1420eaa296bf0a37623248784ed03f
-
SSDEEP
12288:4zk2mpwoYMa4aAqFBRcPgjMYemc21T31pR6F:4zkxp7ahAeRc4j9Jcmlp+
Behavioral task
behavioral1
Sample
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c
-
Size
396KB
-
MD5
05b6ea278fb80714e40a273c768b0260
-
SHA1
1a05c7b77a986b6eb8ac3fb939a9418268b4371d
-
SHA256
5490034ed793b0e05d18bb6622b219c6708b76aab8f45706002757f688a2d20c
-
SHA512
c9e72bc4e2c8f3fdc0747976bb498867732d09306cccb5cb1744e6abe6b9f2043b0a3c7aad8cc9ca3337a4270c6f9867ba1420eaa296bf0a37623248784ed03f
-
SSDEEP
12288:4zk2mpwoYMa4aAqFBRcPgjMYemc21T31pR6F:4zkxp7ahAeRc4j9Jcmlp+
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-