General
-
Target
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a
-
Size
43KB
-
Sample
221124-z2tknsdc7t
-
MD5
4e05534f1b1a17eea6e372ef1abd735e
-
SHA1
5a93caa8a184b56afd6d7569b1b049d908ea7c17
-
SHA256
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a
-
SHA512
262b6e6d2fd58302fcbc54ae51ef3d78d118cd74ab4bd783c5af063df04a672160fe0e5d8e274fe0a4e9a17aa0c4fd301203e1303c2c0ae51aa25e2ffcd37824
-
SSDEEP
768:XAyNMrbxn9kXhFVzrzkOUIAewWxk8VhTqDgCqo:QymgFxkExTVhoq
Static task
static1
Behavioral task
behavioral1
Sample
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a
-
Size
43KB
-
MD5
4e05534f1b1a17eea6e372ef1abd735e
-
SHA1
5a93caa8a184b56afd6d7569b1b049d908ea7c17
-
SHA256
976f0eab8e1394dcecd01ab989d26ccf9fc383c1c91acc0a7530348d5c5b759a
-
SHA512
262b6e6d2fd58302fcbc54ae51ef3d78d118cd74ab4bd783c5af063df04a672160fe0e5d8e274fe0a4e9a17aa0c4fd301203e1303c2c0ae51aa25e2ffcd37824
-
SSDEEP
768:XAyNMrbxn9kXhFVzrzkOUIAewWxk8VhTqDgCqo:QymgFxkExTVhoq
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-