General
-
Target
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66
-
Size
271KB
-
Sample
221123-xcbx8ahe7w
-
MD5
1514152688866b1eae165bfebf7b408e
-
SHA1
316f8aba4dc64b464efe441c499563f8d02b883a
-
SHA256
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66
-
SHA512
fe8ea1f25eae37d8bef309253930fa3c4f1fcb4ae0eb09bf0d59ebe8ee40d544ff7eb020a13e550b510a86897dd466296d3471ee599057d49fad443aa68cba37
-
SSDEEP
6144:WHJ6wjeVXWsGelxHfbL+CXXcl+cB4+MbscpPiQCmXA:WDjeVr1D6jRtTmw
Static task
static1
Behavioral task
behavioral1
Sample
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66
-
Size
271KB
-
MD5
1514152688866b1eae165bfebf7b408e
-
SHA1
316f8aba4dc64b464efe441c499563f8d02b883a
-
SHA256
c2f5f6e4f149f5830f2db60f807b6b5c7d5cc48c0e5df861f17f42bd0454ce66
-
SHA512
fe8ea1f25eae37d8bef309253930fa3c4f1fcb4ae0eb09bf0d59ebe8ee40d544ff7eb020a13e550b510a86897dd466296d3471ee599057d49fad443aa68cba37
-
SSDEEP
6144:WHJ6wjeVXWsGelxHfbL+CXXcl+cB4+MbscpPiQCmXA:WDjeVr1D6jRtTmw
Score9/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-
Suspicious use of SetThreadContext
-