General
-
Target
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d
-
Size
492KB
-
Sample
221125-b455gscg47
-
MD5
d4996ead0844d2d4cd214d32518bbb97
-
SHA1
892132e499f0b8c06a4bc7db6beb00e7e0bf5c50
-
SHA256
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d
-
SHA512
72b457ed4b5e3d12d0aa54b9864a630b338f1b154e23a9559c1731ac0ea195ff5802de693742731bb5dc1df12aaa761bb3320531af033549d61f449e048a2e7d
-
SSDEEP
6144:QcABECAClP2k2BkehhmsVyh/bTzng0m8rPK8jER0u+GIIIIIIIhIIIIIIIIIIIIM:QyCA+P2ktaNVQ/bTrgaNAm5s
Static task
static1
Behavioral task
behavioral1
Sample
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d
-
Size
492KB
-
MD5
d4996ead0844d2d4cd214d32518bbb97
-
SHA1
892132e499f0b8c06a4bc7db6beb00e7e0bf5c50
-
SHA256
4ef9006d67d7cb1e61bc7e09d0c9d52ef1442ac10a5a5c3c1d70a4d9ecbfac7d
-
SHA512
72b457ed4b5e3d12d0aa54b9864a630b338f1b154e23a9559c1731ac0ea195ff5802de693742731bb5dc1df12aaa761bb3320531af033549d61f449e048a2e7d
-
SSDEEP
6144:QcABECAClP2k2BkehhmsVyh/bTzng0m8rPK8jER0u+GIIIIIIIhIIIIIIIIIIIIM:QyCA+P2ktaNVQ/bTrgaNAm5s
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-