General
-
Target
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8
-
Size
200KB
-
Sample
221124-apvjrsab8y
-
MD5
0761d746220bc99525b423656c74e0cb
-
SHA1
c67e89fca0d53fe3cbdbd4512728f38446bdefae
-
SHA256
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8
-
SHA512
fef7bdaad1ee2c0db10f66d2c400de3e225f2333fbf2f9b208da3192f030206ae0566ad36e922cad2a20d2316abb0d3c8a73b0a5447ce7e945ccf1b6ec55d7fa
-
SSDEEP
6144:vmXx9SpWymPBeaSAOJ+7xi5eRed63qaCR8nIBK1:O3uLmPBeaSAOJ+7xi5eRed63qaC4
Static task
static1
Behavioral task
behavioral1
Sample
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8
-
Size
200KB
-
MD5
0761d746220bc99525b423656c74e0cb
-
SHA1
c67e89fca0d53fe3cbdbd4512728f38446bdefae
-
SHA256
6b250a2279311339300a496c82a554af57554fcc5dd78ade4469a9da475747c8
-
SHA512
fef7bdaad1ee2c0db10f66d2c400de3e225f2333fbf2f9b208da3192f030206ae0566ad36e922cad2a20d2316abb0d3c8a73b0a5447ce7e945ccf1b6ec55d7fa
-
SSDEEP
6144:vmXx9SpWymPBeaSAOJ+7xi5eRed63qaCR8nIBK1:O3uLmPBeaSAOJ+7xi5eRed63qaC4
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-