General
-
Target
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e
-
Size
289KB
-
Sample
221124-3bycqaad51
-
MD5
9b84232764e8293ad28d4a42c84e9c74
-
SHA1
0ea7146defded1d87bfac365a3036477bf5fd592
-
SHA256
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e
-
SHA512
e295a7786f6e09fa0a4a3ff28298c62097dc15626b686ec5a0c545c697ffef54995b9c2dcbac1fe2a8d5f3f93974386e11fdc4e6c02cbbf6d55d9c82e3f7b9f1
-
SSDEEP
6144:c9EfghSPgdnSYLCLJcOh0+iqz71hQEK9t5/gesc05u3EMZV3EHN2tlH:clSSSYLCCE05SHa5lscSuUwVgEtV
Static task
static1
Behavioral task
behavioral1
Sample
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e
-
Size
289KB
-
MD5
9b84232764e8293ad28d4a42c84e9c74
-
SHA1
0ea7146defded1d87bfac365a3036477bf5fd592
-
SHA256
7c384fbfe71fb575b1a9ad99e758e69d324c95acb1272fd4de733bcf2d33752e
-
SHA512
e295a7786f6e09fa0a4a3ff28298c62097dc15626b686ec5a0c545c697ffef54995b9c2dcbac1fe2a8d5f3f93974386e11fdc4e6c02cbbf6d55d9c82e3f7b9f1
-
SSDEEP
6144:c9EfghSPgdnSYLCLJcOh0+iqz71hQEK9t5/gesc05u3EMZV3EHN2tlH:clSSSYLCCE05SHa5lscSuUwVgEtV
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks for any installed AV software in registry
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-