General
-
Target
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7
-
Size
3.3MB
-
Sample
221124-rwpqjaaf92
-
MD5
43561bfc03eae44d4f33e70f3e01b870
-
SHA1
4415e1a4ee76b1f73ff1fc55035545873323767d
-
SHA256
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7
-
SHA512
53cd51e4c73c74bff54e313b0263f649bd512ac71d51bc1b52b2cca3eed5df75e388720cfe513fa67b7907a842c56e0646c31d901ed38269e5383c07ad30c878
-
SSDEEP
98304:43YobVRxj94j/JpY6A7PFLiWg5RxjUZzQ:SYeujnY6aIrYZk
Static task
static1
Behavioral task
behavioral1
Sample
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7
-
Size
3.3MB
-
MD5
43561bfc03eae44d4f33e70f3e01b870
-
SHA1
4415e1a4ee76b1f73ff1fc55035545873323767d
-
SHA256
c0bb69b91d29454b09060c0a23d2ba423796dfe0f27d556f61df2e358cc38bc7
-
SHA512
53cd51e4c73c74bff54e313b0263f649bd512ac71d51bc1b52b2cca3eed5df75e388720cfe513fa67b7907a842c56e0646c31d901ed38269e5383c07ad30c878
-
SSDEEP
98304:43YobVRxj94j/JpY6A7PFLiWg5RxjUZzQ:SYeujnY6aIrYZk
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-