General
-
Target
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f
-
Size
1017KB
-
Sample
221128-bf5ttagh6z
-
MD5
fd7478cf5ed8210cb781e2857499ef97
-
SHA1
f4e7b5d69efd3919b7108f0aaebc2d40138d4e77
-
SHA256
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f
-
SHA512
1b5200fc971c09efc9e65644446a22ab156d14b945c7ac72ffb978a9759edd1c436d44dc08b6a0ee2097bb0df70f1e9f7895aecd1d3a3c3b4b649ac1008c953d
-
SSDEEP
24576:uMvucHxOzi2hpgtiC7I9myZhzPym+gMRDiuZhyjvupeSzYPsswnQYa5a0d5w:uMvuc37I9myHv+gZE8X9Ps3
Static task
static1
Behavioral task
behavioral1
Sample
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f
-
Size
1017KB
-
MD5
fd7478cf5ed8210cb781e2857499ef97
-
SHA1
f4e7b5d69efd3919b7108f0aaebc2d40138d4e77
-
SHA256
8cc6b3953ed33919b4ea4a6dcf9fdc51b0ec17d3ee2c8cfeb5e378589d66b01f
-
SHA512
1b5200fc971c09efc9e65644446a22ab156d14b945c7ac72ffb978a9759edd1c436d44dc08b6a0ee2097bb0df70f1e9f7895aecd1d3a3c3b4b649ac1008c953d
-
SSDEEP
24576:uMvucHxOzi2hpgtiC7I9myZhzPym+gMRDiuZhyjvupeSzYPsswnQYa5a0d5w:uMvuc37I9myHv+gZE8X9Ps3
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext
-