General
-
Target
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651
-
Size
277KB
-
Sample
221125-rvtm4ahb5w
-
MD5
ac9873c99ac9dec06a478ebb8db85e54
-
SHA1
51f0340c81a45f983682e0ae4406246d49110bb6
-
SHA256
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651
-
SHA512
da79073dc897af69af0985686913990f7bfa238888a6a835406bf47101693dfe6e719edb25810b12cddedcf6a59e3f1e9ee3a0f811be6771cf26d4f206ce9b63
-
SSDEEP
6144:WKODNBCq2kAqrUOwg0s4fNI+lub/dCgHYMUMGEAkn1:WKoCqxrULvs4f9up3HhzR1
Static task
static1
Behavioral task
behavioral1
Sample
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651
-
Size
277KB
-
MD5
ac9873c99ac9dec06a478ebb8db85e54
-
SHA1
51f0340c81a45f983682e0ae4406246d49110bb6
-
SHA256
6cf60f0046e95a0919e6a1e7ee80004aaff972bcab93ab7b8d76dc26eefbc651
-
SHA512
da79073dc897af69af0985686913990f7bfa238888a6a835406bf47101693dfe6e719edb25810b12cddedcf6a59e3f1e9ee3a0f811be6771cf26d4f206ce9b63
-
SSDEEP
6144:WKODNBCq2kAqrUOwg0s4fNI+lub/dCgHYMUMGEAkn1:WKoCqxrULvs4f9up3HhzR1
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks for any installed AV software in registry
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-