General
-
Target
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526
-
Size
105KB
-
Sample
221123-qsyzcseg53
-
MD5
c8dad4b41bc2d2f8e2fd058b38bbe090
-
SHA1
b5d478deda21b38306c19ee4bae72a9d10fb36f0
-
SHA256
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526
-
SHA512
4470d8578afe0ba50acd22b9c3394a1266b1044ab4987558aa96c427f93d84c645c29c784ef83463e6be4d25cb3758f80259f8cc37ccafb3e7fc43fb569d2f59
-
SSDEEP
1536:HYoqYhNhO2WTHdWvI/2GVI8RgjPxJfqAxG8Q6M1q8B0vFhzeGmuvm72a:kmNQhT9WvIxIegrHxG1Jut1eGmu5
Static task
static1
Behavioral task
behavioral1
Sample
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526
-
Size
105KB
-
MD5
c8dad4b41bc2d2f8e2fd058b38bbe090
-
SHA1
b5d478deda21b38306c19ee4bae72a9d10fb36f0
-
SHA256
9f2d996a11c560cb4a56eb6435d6539d316aa10119c60b755af8d109599d6526
-
SHA512
4470d8578afe0ba50acd22b9c3394a1266b1044ab4987558aa96c427f93d84c645c29c784ef83463e6be4d25cb3758f80259f8cc37ccafb3e7fc43fb569d2f59
-
SSDEEP
1536:HYoqYhNhO2WTHdWvI/2GVI8RgjPxJfqAxG8Q6M1q8B0vFhzeGmuvm72a:kmNQhT9WvIxIegrHxG1Jut1eGmu5
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-