General
-
Target
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985
-
Size
3.3MB
-
Sample
221124-rwqmtsaf94
-
MD5
e457f8797ddb663e65dc833ecd6fabd6
-
SHA1
c16e8b5464a9087b8491e7ef59ce88e480f22253
-
SHA256
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985
-
SHA512
e1fc29bf8373e54c169985a06ef4abf695866673b5a1619f3bf2da73d6afd6a7ac444826b6fd1d68a471ef1a3bd07b22103cc86ee5b4169473454378a9a5b503
-
SSDEEP
98304:s3YobVRxj94j/JpY6A7PFLiWg5RxjUZz+:OYeujnY6aIrYZa
Static task
static1
Behavioral task
behavioral1
Sample
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985
-
Size
3.3MB
-
MD5
e457f8797ddb663e65dc833ecd6fabd6
-
SHA1
c16e8b5464a9087b8491e7ef59ce88e480f22253
-
SHA256
b9872e1ab1c6e17f1df163038b3d552648e3e87d7d5996cb5ce5b9696dbfb985
-
SHA512
e1fc29bf8373e54c169985a06ef4abf695866673b5a1619f3bf2da73d6afd6a7ac444826b6fd1d68a471ef1a3bd07b22103cc86ee5b4169473454378a9a5b503
-
SSDEEP
98304:s3YobVRxj94j/JpY6A7PFLiWg5RxjUZz+:OYeujnY6aIrYZa
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-