General
-
Target
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050
-
Size
180KB
-
Sample
221123-xd894seg29
-
MD5
5afa821c64f2dcd9bbe95c64f929fc5c
-
SHA1
35c423c30d3ba3e494abc558f3f06bff81268c37
-
SHA256
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050
-
SHA512
71216f4cb346f6bae0a88d3111c0c5dc446b7e04cf0acec7d1bf3d4f6601bf7232cf630b4c58dc8a50f559e83cc42b332f7456694bb96f23363ece11a75dce03
-
SSDEEP
3072:6IMGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFiox+:VtcKPpm2lC6YViZj5HQXZmmJ0yCF9Bx/
Static task
static1
Behavioral task
behavioral1
Sample
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050
-
Size
180KB
-
MD5
5afa821c64f2dcd9bbe95c64f929fc5c
-
SHA1
35c423c30d3ba3e494abc558f3f06bff81268c37
-
SHA256
e73b6e84389fb3c5a96634010b6ae3de1480701d04aa442a642a5f4639050050
-
SHA512
71216f4cb346f6bae0a88d3111c0c5dc446b7e04cf0acec7d1bf3d4f6601bf7232cf630b4c58dc8a50f559e83cc42b332f7456694bb96f23363ece11a75dce03
-
SSDEEP
3072:6IMGdYRLoeEdRos/eaqFnqWDb+uTyLDC6s5sSYqGlC6YViZj5HQXZmmJ0yCFiox+:VtcKPpm2lC6YViZj5HQXZmmJ0yCF9Bx/
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-