General
-
Target
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee
-
Size
1.1MB
-
Sample
221124-qpz29aff93
-
MD5
02daff1e68eb29b7f4bbf6cf8254478a
-
SHA1
5a61f408b0e6a04f30735f7aa62f023781d6a6aa
-
SHA256
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee
-
SHA512
87c61689accd3e114d99755a55cbac2755ca820ec775626edfb164bebfc69ef07e21fe44268696bece6f612e7c30ffc411f2d620dfcc95b2e82e61a1556d5cbb
-
SSDEEP
24576:m4lavt0LkLL9IMixoEgeahTPUQO7LbWp/Mq9MmCS:xkwkn9IMHeaxPOTWpkaPCS
Static task
static1
Behavioral task
behavioral1
Sample
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee
-
Size
1.1MB
-
MD5
02daff1e68eb29b7f4bbf6cf8254478a
-
SHA1
5a61f408b0e6a04f30735f7aa62f023781d6a6aa
-
SHA256
1239b8f51a235237132abf7dd82dc13284b56913debed7140e2cb4f80cd75aee
-
SHA512
87c61689accd3e114d99755a55cbac2755ca820ec775626edfb164bebfc69ef07e21fe44268696bece6f612e7c30ffc411f2d620dfcc95b2e82e61a1556d5cbb
-
SSDEEP
24576:m4lavt0LkLL9IMixoEgeahTPUQO7LbWp/Mq9MmCS:xkwkn9IMHeaxPOTWpkaPCS
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-