General
-
Target
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82
-
Size
43KB
-
Sample
221126-knc87sab81
-
MD5
1362c69006f0d2031a23a5f9ac64f9ec
-
SHA1
d764c72a35d4ceb0a4fd8c048ad073da3c9c4b5c
-
SHA256
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82
-
SHA512
5bcd7abb8daf645e81e1fce3025f3c4288a9469080f121b4122102cd27c6bb7269541571f48bd6c82476d29f3cc99b5ffb70809cba20809dafed7b3e1db3e081
-
SSDEEP
768:RqJxn8eLSpJSs0u7IrK9dT62gb58126HAjHtU2qvtO1a58t1ZReNTorIHCCjPkaK:kmdbdHQmaLfejHCCrk
Static task
static1
Behavioral task
behavioral1
Sample
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82.exe
Resource
win10v2004-20220901-en
Malware Config
Targets
-
-
Target
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82
-
Size
43KB
-
MD5
1362c69006f0d2031a23a5f9ac64f9ec
-
SHA1
d764c72a35d4ceb0a4fd8c048ad073da3c9c4b5c
-
SHA256
0725dae7695cbb42716764cf9c777d2f01719c56658eab35bac6a2231a2a7e82
-
SHA512
5bcd7abb8daf645e81e1fce3025f3c4288a9469080f121b4122102cd27c6bb7269541571f48bd6c82476d29f3cc99b5ffb70809cba20809dafed7b3e1db3e081
-
SSDEEP
768:RqJxn8eLSpJSs0u7IrK9dT62gb58126HAjHtU2qvtO1a58t1ZReNTorIHCCjPkaK:kmdbdHQmaLfejHCCrk
Score8/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-