General
-
Target
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b
-
Size
401KB
-
Sample
221125-hpnp8ahd49
-
MD5
edf31f5ba38d360965382562cdb82f6e
-
SHA1
2ff732f572b594306746048a35e56513caadf027
-
SHA256
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b
-
SHA512
7394708ac94558d86b7fd1f5090809c01aa80f8949f8927aaa41a907c47b0171762438549fd3876866f4682ef3506a841b84fadfc72beb059e4cbf8c113126c3
-
SSDEEP
6144:0Ij7TnH53TiBWzvzR0OJJwdyVOYZRIPqwH0l25/txA:zr53HZwdyVOYZRIPqW5/t
Static task
static1
Behavioral task
behavioral1
Sample
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b
-
Size
401KB
-
MD5
edf31f5ba38d360965382562cdb82f6e
-
SHA1
2ff732f572b594306746048a35e56513caadf027
-
SHA256
e20f75bfb83ae1a5aef8cdf18c3632912d3c4ac084bb52cbc9e101694ca5ef5b
-
SHA512
7394708ac94558d86b7fd1f5090809c01aa80f8949f8927aaa41a907c47b0171762438549fd3876866f4682ef3506a841b84fadfc72beb059e4cbf8c113126c3
-
SSDEEP
6144:0Ij7TnH53TiBWzvzR0OJJwdyVOYZRIPqwH0l25/txA:zr53HZwdyVOYZRIPqW5/t
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Adds Run key to start application
-