General
-
Target
c8047e59929f2946b6b2b17c743f75953bc5ec12d89a50ac2dc981936c417c23
-
Size
962KB
-
Sample
221127-tssn5aeg4w
-
MD5
dd713cfdb2ac5df9def39f10da7306d9
-
SHA1
097aec54e1a975333377efce724108b23003fad4
-
SHA256
c8047e59929f2946b6b2b17c743f75953bc5ec12d89a50ac2dc981936c417c23
-
SHA512
562d71ff1bc08d5fe9cdffbc53a7b5d53c904cb98c0393a0f378dc168b0115ce90986a5bf084933d73c2dc26bd23cc4180f08bdda12c6952cc1271dfcc40f8f9
-
SSDEEP
1536:2fRN2/SWANOttpVxXVIXKL7mxUH1OibPoQT9lnouy8:EOAKnrq6Oxo1OcRJ9out
Behavioral task
behavioral1
Sample
c8047e59929f2946b6b2b17c743f75953bc5ec12d89a50ac2dc981936c417c23.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
c8047e59929f2946b6b2b17c743f75953bc5ec12d89a50ac2dc981936c417c23
-
Size
962KB
-
MD5
dd713cfdb2ac5df9def39f10da7306d9
-
SHA1
097aec54e1a975333377efce724108b23003fad4
-
SHA256
c8047e59929f2946b6b2b17c743f75953bc5ec12d89a50ac2dc981936c417c23
-
SHA512
562d71ff1bc08d5fe9cdffbc53a7b5d53c904cb98c0393a0f378dc168b0115ce90986a5bf084933d73c2dc26bd23cc4180f08bdda12c6952cc1271dfcc40f8f9
-
SSDEEP
1536:2fRN2/SWANOttpVxXVIXKL7mxUH1OibPoQT9lnouy8:EOAKnrq6Oxo1OcRJ9out
-
Modifies firewall policy service
-
Modifies security service
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-