General
-
Target
file
-
Size
1.4MB
-
Sample
221123-zv288sdh59
-
MD5
fc5e076046f33048a0b789d8a0f0147e
-
SHA1
694b7316b2e934e1cbdb10aae502ecfc4995f7fd
-
SHA256
8a8f7abf5691793eab15ad5737c24a58201a6fb858408ad83c933d2e2783c068
-
SHA512
dc8e88d4c97ff30624b3abaf51ef85318fd303e4afedddedcddbd0490d8bfc65e0c84f7c2560dcf443936535b2603d947eca187e893f109f5c137006e014f371
-
SSDEEP
24576:RizBpZCy1pq1LZon1kl8BQBYcEwHihNLZcK4uApNrkYhGKba3MgZIY7eCLxYi0:6Jpq1LZwG2q5HiqBptjWbNeVi0
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
file
-
Size
1.4MB
-
MD5
fc5e076046f33048a0b789d8a0f0147e
-
SHA1
694b7316b2e934e1cbdb10aae502ecfc4995f7fd
-
SHA256
8a8f7abf5691793eab15ad5737c24a58201a6fb858408ad83c933d2e2783c068
-
SHA512
dc8e88d4c97ff30624b3abaf51ef85318fd303e4afedddedcddbd0490d8bfc65e0c84f7c2560dcf443936535b2603d947eca187e893f109f5c137006e014f371
-
SSDEEP
24576:RizBpZCy1pq1LZon1kl8BQBYcEwHihNLZcK4uApNrkYhGKba3MgZIY7eCLxYi0:6Jpq1LZwG2q5HiqBptjWbNeVi0
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-