General
-
Target
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a
-
Size
1.2MB
-
Sample
221126-pb56nscc82
-
MD5
a2c1055a3da9f0f112d3839d2d032a36
-
SHA1
d591ef12b1d64b606e673b98acedf74366200dcd
-
SHA256
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a
-
SHA512
c35467dc4ea304ec113d7c0a51e79fb09e84d84e3194262ec0931adebb7179a83691506e9672b3f0df51125cc4a65e62c0200d4c93074d218257ca3b11727853
-
SSDEEP
24576:bvJZCbUT/KMtbZdrTqF9ozkuKCboFRcLvBEwwo:rCb0/KAa9ozkuAFRqywwo
Static task
static1
Behavioral task
behavioral1
Sample
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a
-
Size
1.2MB
-
MD5
a2c1055a3da9f0f112d3839d2d032a36
-
SHA1
d591ef12b1d64b606e673b98acedf74366200dcd
-
SHA256
d96bd8bfbd53664b1f39632af3c4344755f547b72a8402b912e63bfcad4b680a
-
SHA512
c35467dc4ea304ec113d7c0a51e79fb09e84d84e3194262ec0931adebb7179a83691506e9672b3f0df51125cc4a65e62c0200d4c93074d218257ca3b11727853
-
SSDEEP
24576:bvJZCbUT/KMtbZdrTqF9ozkuKCboFRcLvBEwwo:rCb0/KAa9ozkuAFRqywwo
Score10/10-
Detected phishing page
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
-