General
-
Target
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342
-
Size
586KB
-
Sample
221124-k4tacsgb6z
-
MD5
8d0f02df21b18da50fe2a5362c2af128
-
SHA1
7d04e4dd4a90cdfc76c0b9e34c95f2f84b313a6d
-
SHA256
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342
-
SHA512
12292b0d928101123110fdeaf41b6d253adb341e696621bf0ddb004ec36edd0caf12afdce95c05ad7458bc32b6aedf772ce643b4b6140cd4377bc2acf967da25
-
SSDEEP
12288:FeeRICtymjYPAUBXFsY21BBCPB2A3mABdg03:xUp0DUFmABdT3
Static task
static1
Behavioral task
behavioral1
Sample
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342
-
Size
586KB
-
MD5
8d0f02df21b18da50fe2a5362c2af128
-
SHA1
7d04e4dd4a90cdfc76c0b9e34c95f2f84b313a6d
-
SHA256
2c2332a92193e095d4e2f4886e258e2c7cdf8c48df97bc44bd24f1ef4dd8c342
-
SHA512
12292b0d928101123110fdeaf41b6d253adb341e696621bf0ddb004ec36edd0caf12afdce95c05ad7458bc32b6aedf772ce643b4b6140cd4377bc2acf967da25
-
SSDEEP
12288:FeeRICtymjYPAUBXFsY21BBCPB2A3mABdg03:xUp0DUFmABdT3
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-