General
-
Target
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8
-
Size
499KB
-
Sample
221125-cex81sde46
-
MD5
ae5bd5427abf39e70c293654a0175a14
-
SHA1
c0f033d36921be1633c559a6d81ec6e23248182c
-
SHA256
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8
-
SHA512
a47cecb455dda1d08e2ce595fc4d942cf2ff736e4083dd35a38ea3b66c7f462776a03cd27b63ad1c6074aff46aa2862ae758786b5df167ac66cb97ea1a43d824
-
SSDEEP
6144:1ENSTpgtIVzFPcMnnPXGiNeh7dSwN8nobXquER0u+GIIIIIIIhIIIIIIIIIIIII9:1SSJVzuKvhidS23Mm5i
Static task
static1
Behavioral task
behavioral1
Sample
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8
-
Size
499KB
-
MD5
ae5bd5427abf39e70c293654a0175a14
-
SHA1
c0f033d36921be1633c559a6d81ec6e23248182c
-
SHA256
48d33373df62ac7d58904756c1ec0807e7954bbf9e7ccb314712e313b576aba8
-
SHA512
a47cecb455dda1d08e2ce595fc4d942cf2ff736e4083dd35a38ea3b66c7f462776a03cd27b63ad1c6074aff46aa2862ae758786b5df167ac66cb97ea1a43d824
-
SSDEEP
6144:1ENSTpgtIVzFPcMnnPXGiNeh7dSwN8nobXquER0u+GIIIIIIIhIIIIIIIIIIIII9:1SSJVzuKvhidS23Mm5i
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-