General
-
Target
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28
-
Size
255KB
-
Sample
221124-ervd1agc87
-
MD5
3f4d96cbd4ea55d9e8c4aafa19b86197
-
SHA1
572a642c153bbd2c05a1fe7175c7e53e063b8479
-
SHA256
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28
-
SHA512
39ace922d4f71c5113aa5cdfc6a91b4436c3bcc41e46634ba120601e3730a0e3a3e56a61fd7b7482bdc03c9c6eee63236e241ced5aef172d439a065e1f6238b7
-
SSDEEP
6144:7UnITMpSph0lMqqgWoDhujqcQQbxJhVGvkVbOcH4CIMc:7CQMY07qgWo6VVGvkVLAV
Static task
static1
Behavioral task
behavioral1
Sample
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28
-
Size
255KB
-
MD5
3f4d96cbd4ea55d9e8c4aafa19b86197
-
SHA1
572a642c153bbd2c05a1fe7175c7e53e063b8479
-
SHA256
8f8694d6770b35934b232c3737f78ecc3acf2e75f0066151c28958d813191d28
-
SHA512
39ace922d4f71c5113aa5cdfc6a91b4436c3bcc41e46634ba120601e3730a0e3a3e56a61fd7b7482bdc03c9c6eee63236e241ced5aef172d439a065e1f6238b7
-
SSDEEP
6144:7UnITMpSph0lMqqgWoDhujqcQQbxJhVGvkVbOcH4CIMc:7CQMY07qgWo6VVGvkVLAV
Score8/10-
Modifies Installed Components in the registry
-
Registers COM server for autorun
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-