General
-
Target
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9
-
Size
169KB
-
Sample
221126-kg5d4shh7z
-
MD5
dcf9499899f83e60d57ac9aa5064db63
-
SHA1
7a9aba94c8c035438fb708abe8b06920871041f3
-
SHA256
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9
-
SHA512
f646b1710dea8dbbce6f355d6752b9c8ba36357589a2e5b3ee6332a151261f13f124e1aa4320461515d5748293c99857f5ec9cf2d8a33e31c285207b5e2fb8bd
-
SSDEEP
3072:R58LGtClDqkVBz4ZpSABKo+YfoXhRhd1TYo8aAz+jc1/J:HqDqkV5cYABt+Y6DJ/az+jU/
Static task
static1
Behavioral task
behavioral1
Sample
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9
-
Size
169KB
-
MD5
dcf9499899f83e60d57ac9aa5064db63
-
SHA1
7a9aba94c8c035438fb708abe8b06920871041f3
-
SHA256
474379bf82cdf09ed9e85eff1272c21c99143be48ebd698fca6f7dce3c7276f9
-
SHA512
f646b1710dea8dbbce6f355d6752b9c8ba36357589a2e5b3ee6332a151261f13f124e1aa4320461515d5748293c99857f5ec9cf2d8a33e31c285207b5e2fb8bd
-
SSDEEP
3072:R58LGtClDqkVBz4ZpSABKo+YfoXhRhd1TYo8aAz+jc1/J:HqDqkV5cYABt+Y6DJ/az+jU/
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-