General
-
Target
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8
-
Size
43KB
-
Sample
221126-km97jsab8t
-
MD5
e9ec61fc8def56363871364a9af90e87
-
SHA1
bb227dc2d4abca5033e4ada392da8465f23db33f
-
SHA256
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8
-
SHA512
1aaf1a17e0e9a0ffe55301ed59799a7b5878700797f524c4a2ed87785e70b12c6dcd0cddc644262fd477d94c4c66dee8a17599a8f700fc3971c0926c7332c3ca
-
SSDEEP
768:pTe7nd8qhYz3S228PmrW96Te2+p581R6HijH+EqvtK1EXoB1T1kNtuPmHCCjPkaH:Gm6Hh0KQWvhkZHCCrk
Static task
static1
Behavioral task
behavioral1
Sample
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8
-
Size
43KB
-
MD5
e9ec61fc8def56363871364a9af90e87
-
SHA1
bb227dc2d4abca5033e4ada392da8465f23db33f
-
SHA256
339d1e54d957d1982fd84cb2146c24f379156ed94ffd6fac6e86806d8095d2e8
-
SHA512
1aaf1a17e0e9a0ffe55301ed59799a7b5878700797f524c4a2ed87785e70b12c6dcd0cddc644262fd477d94c4c66dee8a17599a8f700fc3971c0926c7332c3ca
-
SSDEEP
768:pTe7nd8qhYz3S228PmrW96Te2+p581R6HijH+EqvtK1EXoB1T1kNtuPmHCCjPkaH:Gm6Hh0KQWvhkZHCCrk
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-