General
-
Target
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343
-
Size
359KB
-
Sample
221124-ay4h2aah5x
-
MD5
1e83272cf6b9a9ce38f589389ed81930
-
SHA1
05339c0a221649190582f8675c0a3fd1a05c35c8
-
SHA256
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343
-
SHA512
a8b558c7731dad91b5e2241a1c8e2695a7b78aded94922f994d01815a3b39b7b3571467d46cf6a1908e3f832df3a855742a24ccad4a7b5ee0c8767392f506e58
-
SSDEEP
6144:HPeXhCRhrDPePOXhCRhrDPdPOftdcNMP2ftdcNdPVNSDyDISthpYNSDyDISthp:HPRR9PePhR9PdP1MP9dP/SDyttjcSDy7
Behavioral task
behavioral1
Sample
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343
-
Size
359KB
-
MD5
1e83272cf6b9a9ce38f589389ed81930
-
SHA1
05339c0a221649190582f8675c0a3fd1a05c35c8
-
SHA256
b9d8b176e38236e1ab48a4cdd10be4326262f7f75f657a2f36f365c22558d343
-
SHA512
a8b558c7731dad91b5e2241a1c8e2695a7b78aded94922f994d01815a3b39b7b3571467d46cf6a1908e3f832df3a855742a24ccad4a7b5ee0c8767392f506e58
-
SSDEEP
6144:HPeXhCRhrDPePOXhCRhrDPdPOftdcNMP2ftdcNdPVNSDyDISthpYNSDyDISthp:HPRR9PePhR9PdP1MP9dP/SDyttjcSDy7
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Drops file in System32 directory
-