General
-
Target
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479
-
Size
232KB
-
Sample
221123-xnrstaae6t
-
MD5
44381948c8f32f90a00620b667db078c
-
SHA1
606f2c82c0539f055a8aa052fed57983b16f3c17
-
SHA256
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479
-
SHA512
361e8190928c3514083ed9209478f62bd01953a2a71aa8109cbc5a40d0f969067950d1d9a38b70f997980cc7cc02bfec8087362ab903a52e963b3d296e040f63
-
SSDEEP
6144:aG5y2uK3PFKs78vpRTlEqxF6snji81RUinKbLqq:aGRuYPhpX
Static task
static1
Behavioral task
behavioral1
Sample
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479
-
Size
232KB
-
MD5
44381948c8f32f90a00620b667db078c
-
SHA1
606f2c82c0539f055a8aa052fed57983b16f3c17
-
SHA256
149dac716b72428daf24d3e0ae11aafdea0a401b87995651b0a1ee4510b68479
-
SHA512
361e8190928c3514083ed9209478f62bd01953a2a71aa8109cbc5a40d0f969067950d1d9a38b70f997980cc7cc02bfec8087362ab903a52e963b3d296e040f63
-
SSDEEP
6144:aG5y2uK3PFKs78vpRTlEqxF6snji81RUinKbLqq:aGRuYPhpX
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-