General
-
Target
408d9d2fecc5ef52dc230bc50664cbcab28b97000b22e10c55b3b7cec4fbf34e
-
Size
3.3MB
-
Sample
221127-sq8f5agd26
-
MD5
6627f3503fd971c24f274d670b9d6cd7
-
SHA1
b77b984497b6c3d1d695de6363b1b35d9a4c192e
-
SHA256
408d9d2fecc5ef52dc230bc50664cbcab28b97000b22e10c55b3b7cec4fbf34e
-
SHA512
cf9210fa61eb5fec5d8d3bf2ea7e22c1f2d5f54c5f80b71c4146f73a4369a3ea0e5b7489750ff6ec00fee347398d023fb8580c1a4e134932cbd3ff555b9f380a
-
SSDEEP
98304:VgwRLgSX5ZcttvsdEv9eL4UezmlplRUSJLWpAh:VgOgSX/GW+1SezmXlRDRT
Static task
static1
Behavioral task
behavioral1
Sample
408d9d2fecc5ef52dc230bc50664cbcab28b97000b22e10c55b3b7cec4fbf34e.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
408d9d2fecc5ef52dc230bc50664cbcab28b97000b22e10c55b3b7cec4fbf34e
-
Size
3.3MB
-
MD5
6627f3503fd971c24f274d670b9d6cd7
-
SHA1
b77b984497b6c3d1d695de6363b1b35d9a4c192e
-
SHA256
408d9d2fecc5ef52dc230bc50664cbcab28b97000b22e10c55b3b7cec4fbf34e
-
SHA512
cf9210fa61eb5fec5d8d3bf2ea7e22c1f2d5f54c5f80b71c4146f73a4369a3ea0e5b7489750ff6ec00fee347398d023fb8580c1a4e134932cbd3ff555b9f380a
-
SSDEEP
98304:VgwRLgSX5ZcttvsdEv9eL4UezmlplRUSJLWpAh:VgOgSX/GW+1SezmXlRDRT
-
Executes dropped EXE
-
Stops running service(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-