General
-
Target
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a
-
Size
155KB
-
Sample
221124-n5kldsfc5z
-
MD5
62e23693c49b099b0d9619ef8e212ee8
-
SHA1
cd47bbee628fd356cb128e13ce867ad1da31fe46
-
SHA256
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a
-
SHA512
1ffb98c769638589b8f744778fe259614df77f3f2dfab20e057feeb008f3093b1d6874ba9a98a60ec5f78051b43fa6062ed9fdaf098453861f8b94c0815708d1
-
SSDEEP
3072:hVmb+snEpcccbrtSN/8V2fUinSMM1F6DsSWZtY77r/kRUtSbOEfD2NeIkVklbFdL:7mbHEpccc8h8V0fnhSwDsSeRUJk
Static task
static1
Behavioral task
behavioral1
Sample
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a
-
Size
155KB
-
MD5
62e23693c49b099b0d9619ef8e212ee8
-
SHA1
cd47bbee628fd356cb128e13ce867ad1da31fe46
-
SHA256
2bcfacc742371ffde017134aaa39b895ce0da1f8ccd86d078c3344f0c9c5ef2a
-
SHA512
1ffb98c769638589b8f744778fe259614df77f3f2dfab20e057feeb008f3093b1d6874ba9a98a60ec5f78051b43fa6062ed9fdaf098453861f8b94c0815708d1
-
SSDEEP
3072:hVmb+snEpcccbrtSN/8V2fUinSMM1F6DsSWZtY77r/kRUtSbOEfD2NeIkVklbFdL:7mbHEpccc8h8V0fnhSwDsSeRUJk
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-