General
-
Target
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb
-
Size
145KB
-
Sample
221125-kdw9bshb9y
-
MD5
bac14564d1bc1337b43ef99a788dfd89
-
SHA1
5ae6bb3b4abe5a3daa29c66a4ff8d6eb3c57eb11
-
SHA256
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb
-
SHA512
58b8e2c961fa830b4b5b287cfcfcab3e3daee06d0a1b56f2d157de1c6e2b6f9ea02b79e3c36d14fc42369546181ed5141c0b55f4ce99e076b049f057e1c8e509
-
SSDEEP
1536:M/21Q2fgdkH38Aas6hDkUDR3UNjOndXbkqAIBnI47Qz8PLsh7mpPey8X74Fk/5AB:M/2Q2TsvVtPXPKzb75FxpuH
Static task
static1
Behavioral task
behavioral1
Sample
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb
-
Size
145KB
-
MD5
bac14564d1bc1337b43ef99a788dfd89
-
SHA1
5ae6bb3b4abe5a3daa29c66a4ff8d6eb3c57eb11
-
SHA256
4d5d87628bf49e4116edd68d7024155e66df993e91c6d0f41cce0c12c14662fb
-
SHA512
58b8e2c961fa830b4b5b287cfcfcab3e3daee06d0a1b56f2d157de1c6e2b6f9ea02b79e3c36d14fc42369546181ed5141c0b55f4ce99e076b049f057e1c8e509
-
SSDEEP
1536:M/21Q2fgdkH38Aas6hDkUDR3UNjOndXbkqAIBnI47Qz8PLsh7mpPey8X74Fk/5AB:M/2Q2TsvVtPXPKzb75FxpuH
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-