General
-
Target
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a
-
Size
296KB
-
Sample
221123-zfrtyscg27
-
MD5
986b756276b288342694580ede47c052
-
SHA1
0ffa35b6cf28d34ac78798697dde42a06eadc55e
-
SHA256
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a
-
SHA512
2736cb0b0c0ae87f8b9fa2a2085189689116e1ab93e320fadcedaec9e7baa39a4d954e2550adaedeccb7a5dfdaac76e955509200359b5d384cd029ce9669c9e3
-
SSDEEP
6144:l0IZ0/J8lG4tL3tQvKi14lH4ofYuYDqs9J8Bm0GuI/wd6C4jw4aBCsCr+WcFPIk:2IZIJ8lG4tBQSLH4EYt+svWmYVd6CMw5
Static task
static1
Behavioral task
behavioral1
Sample
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a
-
Size
296KB
-
MD5
986b756276b288342694580ede47c052
-
SHA1
0ffa35b6cf28d34ac78798697dde42a06eadc55e
-
SHA256
b63453fe6b8e3e7f57394d7c56e2ee1669fefb48d1c2af85d5c8c4c7e0299a9a
-
SHA512
2736cb0b0c0ae87f8b9fa2a2085189689116e1ab93e320fadcedaec9e7baa39a4d954e2550adaedeccb7a5dfdaac76e955509200359b5d384cd029ce9669c9e3
-
SSDEEP
6144:l0IZ0/J8lG4tL3tQvKi14lH4ofYuYDqs9J8Bm0GuI/wd6C4jw4aBCsCr+WcFPIk:2IZIJ8lG4tBQSLH4EYt+svWmYVd6CMw5
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-