General
-
Target
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc
-
Size
247KB
-
Sample
221126-km1m4sab7y
-
MD5
34389a01aec041ab3c272ab506310de4
-
SHA1
c18d4ce78e334b77099a8dd8e4ac8885758a04ec
-
SHA256
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc
-
SHA512
e9c1b5779b85ba9c6cbe317d56438f61ed52a29a7d1ba39373f7d3a5606c6271c4bbb3e769f27bbd7a15c121431683a195821f0b78dcf7e222b72a3397e259e3
-
SSDEEP
3072:ddbdHQHaN1nHdrkPvjo2StmJ5wT+bvoS+YUMxv8RKV9EYtKq2twokKyQf:dxHdoPvM255F+JCER4OyKFtwod
Static task
static1
Behavioral task
behavioral1
Sample
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc
-
Size
247KB
-
MD5
34389a01aec041ab3c272ab506310de4
-
SHA1
c18d4ce78e334b77099a8dd8e4ac8885758a04ec
-
SHA256
c2c01a495b4597f415c35ac3271d9bad324493c9dd6c4ec07c63e045ecc5eddc
-
SHA512
e9c1b5779b85ba9c6cbe317d56438f61ed52a29a7d1ba39373f7d3a5606c6271c4bbb3e769f27bbd7a15c121431683a195821f0b78dcf7e222b72a3397e259e3
-
SSDEEP
3072:ddbdHQHaN1nHdrkPvjo2StmJ5wT+bvoS+YUMxv8RKV9EYtKq2twokKyQf:dxHdoPvM255F+JCER4OyKFtwod
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-