General
-
Target
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3
-
Size
3.3MB
-
Sample
221124-rw7w4sag35
-
MD5
a0095a1f6a1fcb3d1a3ed922f00ddfac
-
SHA1
3f199b3f2c98553ed77e710c274a500c8d60a36b
-
SHA256
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3
-
SHA512
c28773fb9d8e363d59e4d5369b3c7e2cc73028699364eb4f4c45d8e8e214f8dd531950225cf7ae29c7e0f8841048b7d37ac9c289cc64bf8420a064759436f42e
-
SSDEEP
98304:53YobVRxj94j/JpY6A7PFLiWg5RxjUZzg:FYeujnY6aIrYZ8
Static task
static1
Behavioral task
behavioral1
Sample
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3
-
Size
3.3MB
-
MD5
a0095a1f6a1fcb3d1a3ed922f00ddfac
-
SHA1
3f199b3f2c98553ed77e710c274a500c8d60a36b
-
SHA256
6ebce548c356df0fdbfe471c9745ac34b166bf2c329f1d8714b99038c0ccefc3
-
SHA512
c28773fb9d8e363d59e4d5369b3c7e2cc73028699364eb4f4c45d8e8e214f8dd531950225cf7ae29c7e0f8841048b7d37ac9c289cc64bf8420a064759436f42e
-
SSDEEP
98304:53YobVRxj94j/JpY6A7PFLiWg5RxjUZzg:FYeujnY6aIrYZ8
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-