General
-
Target
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294
-
Size
122KB
-
Sample
221125-j6t41agf9z
-
MD5
9c08a79b544535597e6ef343c93a2384
-
SHA1
4db7c3b2e78ba10a2e0952edbad5951386ccaefb
-
SHA256
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294
-
SHA512
60b02751b4d579084b8dc50b1650da8be95899b4cbcdc06b45dd5020508c11f2136708dd5e5a431647ae3c4c19421e1da7c1750c38f2612e0e04711ed9ee5d25
-
SSDEEP
3072:wzFLhoVvrQT4YbNCGLB5D4nS3+Ks01uj3QuzvtdTccv3eYza6rqtR5w6kPKTP+Dt:wzFLhoazNCGLB5D4nSuKs01uj3Quzvt5
Static task
static1
Behavioral task
behavioral1
Sample
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294
-
Size
122KB
-
MD5
9c08a79b544535597e6ef343c93a2384
-
SHA1
4db7c3b2e78ba10a2e0952edbad5951386ccaefb
-
SHA256
17a004869c2bbf28659dded358945ed5de360b8b535b14f5f6212125c65ab294
-
SHA512
60b02751b4d579084b8dc50b1650da8be95899b4cbcdc06b45dd5020508c11f2136708dd5e5a431647ae3c4c19421e1da7c1750c38f2612e0e04711ed9ee5d25
-
SSDEEP
3072:wzFLhoVvrQT4YbNCGLB5D4nS3+Ks01uj3QuzvtdTccv3eYza6rqtR5w6kPKTP+Dt:wzFLhoazNCGLB5D4nSuKs01uj3Quzvt5
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-