General
-
Target
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7
-
Size
181KB
-
Sample
221125-kjk39aea79
-
MD5
92323da33e35ad7045645d7f149f41b3
-
SHA1
e2e28cd2c871233419197876763fcdad572e3058
-
SHA256
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7
-
SHA512
f0f56ae2d90c7d2feb3f8faa29e3b544210da38cd9b69133ac69d7969d33c4c45be8299ec9efc22b9d60bd7584bd50b2fff2cfb086b8b69f035add91df29333b
-
SSDEEP
3072:6x5hOuzuyeopCG4Ly41G9KXs3xTlcmBvQdPSIjnAFHaKH2IZ4:6xj1F4vAKsh/YdainEHaKH2IZ
Static task
static1
Behavioral task
behavioral1
Sample
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7
-
Size
181KB
-
MD5
92323da33e35ad7045645d7f149f41b3
-
SHA1
e2e28cd2c871233419197876763fcdad572e3058
-
SHA256
dea2308dc87bbd9908b5b5d62f8bf025111e586ac13fd0e349b6fcd7c28de4d7
-
SHA512
f0f56ae2d90c7d2feb3f8faa29e3b544210da38cd9b69133ac69d7969d33c4c45be8299ec9efc22b9d60bd7584bd50b2fff2cfb086b8b69f035add91df29333b
-
SSDEEP
3072:6x5hOuzuyeopCG4Ly41G9KXs3xTlcmBvQdPSIjnAFHaKH2IZ4:6xj1F4vAKsh/YdainEHaKH2IZ
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-