General
-
Target
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820
-
Size
252KB
-
Sample
221125-j1b18scg78
-
MD5
ebb22b5608c4b16460163a48d65b9dd4
-
SHA1
254458ad1bdab9c30d09183c3d53d0dc29beb246
-
SHA256
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820
-
SHA512
d61d43a1cab46c631a4a985038fe102fa767a615cc60c40988c9fbfdc885a7494e0da534ac43883c07d2933eccee4dc2c285348eb359a54af3b53ffbd091d79f
-
SSDEEP
6144:c0B1xJ0dXZMP4HJPLQvvxnVcaOqH7475dvJF+wEFvRe:cY1lVcao5JFx
Static task
static1
Behavioral task
behavioral1
Sample
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820
-
Size
252KB
-
MD5
ebb22b5608c4b16460163a48d65b9dd4
-
SHA1
254458ad1bdab9c30d09183c3d53d0dc29beb246
-
SHA256
2ebcb53eea5f6649736bfad1bb72b537bc25301d7d87dca7ea75518a014b8820
-
SHA512
d61d43a1cab46c631a4a985038fe102fa767a615cc60c40988c9fbfdc885a7494e0da534ac43883c07d2933eccee4dc2c285348eb359a54af3b53ffbd091d79f
-
SSDEEP
6144:c0B1xJ0dXZMP4HJPLQvvxnVcaOqH7475dvJF+wEFvRe:cY1lVcao5JFx
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-