General
-
Target
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415
-
Size
329KB
-
Sample
221125-hjf37acd71
-
MD5
2927cfa58259da34494ae3445107a372
-
SHA1
3b6ef88d46c09541b3dc5e89aac4dd5602d45d81
-
SHA256
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415
-
SHA512
e1f5522dda3af9c0caa2c4a5c62880fec5c183f70704988eaec933319a5f89797415fd9baec97a7718986a8d180e42f6e3b6fa96339514cbafd2c71742a11de4
-
SSDEEP
6144:hy+o4AwgO9JhQONF+d3ev+tNB3xfjoUlDLJDU7W8N6UlE:hy+tP9JvNG3ev+tNB3x
Static task
static1
Behavioral task
behavioral1
Sample
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415
-
Size
329KB
-
MD5
2927cfa58259da34494ae3445107a372
-
SHA1
3b6ef88d46c09541b3dc5e89aac4dd5602d45d81
-
SHA256
f6d21661b97d9aef334cdeba7fec3e348b9f35e5a10b36d92896795796ce9415
-
SHA512
e1f5522dda3af9c0caa2c4a5c62880fec5c183f70704988eaec933319a5f89797415fd9baec97a7718986a8d180e42f6e3b6fa96339514cbafd2c71742a11de4
-
SSDEEP
6144:hy+o4AwgO9JhQONF+d3ev+tNB3xfjoUlDLJDU7W8N6UlE:hy+tP9JvNG3ev+tNB3x
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-