General
-
Target
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9
-
Size
97KB
-
Sample
221124-p3xzdaec58
-
MD5
5383675e7dee2bad06115abaa5a59b4b
-
SHA1
5350db1e955b919d3e220cc37c48fb58a8e7b6ab
-
SHA256
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9
-
SHA512
e7ac2e7693620321db0a1f7c984f0d874a064978e6ea609bccd52209eab49d593b9ac77bfa174d813f4871e00bb2565a7c471d8fde6ecaeaad782b146a4edbfd
-
SSDEEP
1536:MZpgvMIvRvwHMWhY7ZXaXJyi5aVwCDOA7yEYkeZ3p4wZJKvcXO:MnbI5vwHMWhYwJyi5wwC35QT4mXO
Static task
static1
Behavioral task
behavioral1
Sample
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9
-
Size
97KB
-
MD5
5383675e7dee2bad06115abaa5a59b4b
-
SHA1
5350db1e955b919d3e220cc37c48fb58a8e7b6ab
-
SHA256
75531efbfefba9508bf57c600906b84136b2ea08cbaaebfd7ef76c870be6bad9
-
SHA512
e7ac2e7693620321db0a1f7c984f0d874a064978e6ea609bccd52209eab49d593b9ac77bfa174d813f4871e00bb2565a7c471d8fde6ecaeaad782b146a4edbfd
-
SSDEEP
1536:MZpgvMIvRvwHMWhY7ZXaXJyi5aVwCDOA7yEYkeZ3p4wZJKvcXO:MnbI5vwHMWhYwJyi5wwC35QT4mXO
Score10/10-
Modifies WinLogon for persistence
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-