General
-
Target
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8
-
Size
442KB
-
Sample
221124-gj9vtscg73
-
MD5
ab901397b9b6c02b2f770db9eb3d2eed
-
SHA1
1d9288f6799af0c019bf23f94f1f67c037e069c2
-
SHA256
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8
-
SHA512
a2e6a03aab85501c86de581372a9b842b5fb02362805a92e43ac3bde4e423c6cd98464a9f74ba3c6830776a93e5c5a567e8a26db161988389d099d9dc98cd9b9
-
SSDEEP
12288:JHICZ9iSCnm8B/Hw9pVKGCs64DVdZ3+8qFXTjt:JoC7ijwFKlVadZ3+8qNt
Static task
static1
Behavioral task
behavioral1
Sample
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8
-
Size
442KB
-
MD5
ab901397b9b6c02b2f770db9eb3d2eed
-
SHA1
1d9288f6799af0c019bf23f94f1f67c037e069c2
-
SHA256
3eb93a561ba9bd10e985e8a5dc82414ee393e9cf0b6d098eb21dd2854b2cbbb8
-
SHA512
a2e6a03aab85501c86de581372a9b842b5fb02362805a92e43ac3bde4e423c6cd98464a9f74ba3c6830776a93e5c5a567e8a26db161988389d099d9dc98cd9b9
-
SSDEEP
12288:JHICZ9iSCnm8B/Hw9pVKGCs64DVdZ3+8qFXTjt:JoC7ijwFKlVadZ3+8qNt
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Adds policy Run key to start application
-
Blocklisted process makes network request
-
Disables taskbar notifications via registry modification
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-