General
-
Target
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf
-
Size
275KB
-
Sample
221125-e5m7vabe62
-
MD5
801e82f1d83886def671b3e327aaf9d9
-
SHA1
fe22d9873884c1102ba5062e18c72998f98ebd45
-
SHA256
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf
-
SHA512
96df6be3f0462f65226ae82ad0d24923f50e75829d74e328caa98ab9f5f99fa69079a1e994e50a36ec5dad1bf2ff3d1f490350324bf86c3db1fe0c8fc09a180c
-
SSDEEP
6144:6WVQPoinMh00GZgMAkeOLtZryPthEli2khGS+804d:tVEoT0vZgMA1OhZritSlD6j+8rd
Static task
static1
Behavioral task
behavioral1
Sample
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf
-
Size
275KB
-
MD5
801e82f1d83886def671b3e327aaf9d9
-
SHA1
fe22d9873884c1102ba5062e18c72998f98ebd45
-
SHA256
17ae6d806192ab41f146f5e759e5b1c8b85ba6b9b596a6cc2556207bf521b2bf
-
SHA512
96df6be3f0462f65226ae82ad0d24923f50e75829d74e328caa98ab9f5f99fa69079a1e994e50a36ec5dad1bf2ff3d1f490350324bf86c3db1fe0c8fc09a180c
-
SSDEEP
6144:6WVQPoinMh00GZgMAkeOLtZryPthEli2khGS+804d:tVEoT0vZgMA1OhZritSlD6j+8rd
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks for any installed AV software in registry
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-