General
-
Target
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef
-
Size
517KB
-
Sample
221123-py935scf33
-
MD5
4faedbf756856dfc8305187fe3eb12f9
-
SHA1
20765f7138e063f1e9f7cc474cd842bcd146f6ec
-
SHA256
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef
-
SHA512
446c639dea2bc4119ec9625a057c166502eb26c562c806cd6b28a69490fd216f0b0f58f64ab054162fcdcdfab4c4d8933c2ccd20b1ba0a3f70c13f4be3d7b87e
-
SSDEEP
12288:96RafPsMXfnOr/LeJa6IEzWdiBtwxG+buDS:oRaXxvOjL6SIDwBuO
Static task
static1
Behavioral task
behavioral1
Sample
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef
-
Size
517KB
-
MD5
4faedbf756856dfc8305187fe3eb12f9
-
SHA1
20765f7138e063f1e9f7cc474cd842bcd146f6ec
-
SHA256
ef88ebcdb725a3515097e271e0dd5b7e735100605aa82ef734de7c1f902b95ef
-
SHA512
446c639dea2bc4119ec9625a057c166502eb26c562c806cd6b28a69490fd216f0b0f58f64ab054162fcdcdfab4c4d8933c2ccd20b1ba0a3f70c13f4be3d7b87e
-
SSDEEP
12288:96RafPsMXfnOr/LeJa6IEzWdiBtwxG+buDS:oRaXxvOjL6SIDwBuO
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-