General
-
Target
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716
-
Size
346KB
-
Sample
221127-r4kfsaac2w
-
MD5
1be171a3c3a7a9006c6940201c6f9c26
-
SHA1
aff2ba127f315a6a1d2e4aec1c06da3fbf4d59d6
-
SHA256
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716
-
SHA512
961b34bab378064094b5b458b9925a90627113e3caec0a39c1f25ca0a32a2d98e169ba5b60466e6cff096f65fca03b468f866bbee09c12d0838f35a193f21af7
-
SSDEEP
6144:1cjqC9W81Xf8DgwNuey092Qeb5JcPDn1wOMKtEjt:1Y3s81vNw011tkD1bMKtEj
Static task
static1
Behavioral task
behavioral1
Sample
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716
-
Size
346KB
-
MD5
1be171a3c3a7a9006c6940201c6f9c26
-
SHA1
aff2ba127f315a6a1d2e4aec1c06da3fbf4d59d6
-
SHA256
516f7cc790793d7eb88446506c5c1e257f54efa449a7143520f594ed4affb716
-
SHA512
961b34bab378064094b5b458b9925a90627113e3caec0a39c1f25ca0a32a2d98e169ba5b60466e6cff096f65fca03b468f866bbee09c12d0838f35a193f21af7
-
SSDEEP
6144:1cjqC9W81Xf8DgwNuey092Qeb5JcPDn1wOMKtEjt:1Y3s81vNw011tkD1bMKtEj
Score8/10-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks for any installed AV software in registry
-
Drops desktop.ini file(s)
-
Suspicious use of SetThreadContext
-