General
-
Target
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08
-
Size
169KB
-
Sample
221128-flrxcsga97
-
MD5
c1179cdac74cd2250f8cce790f9b660a
-
SHA1
f80c0a20bb8477857c52ba981a0a7627223c3f32
-
SHA256
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08
-
SHA512
847557904e6e7ee4fd691e8cd388345a4850406c9fb00999fb69d1acbbe69918acb358d27ab7a5a758709a54b318241dea5622bcc1babbc30bf944b8f3f838ec
-
SSDEEP
3072:T3c1fP4AJJX3Y6p8jmow4IRo/PFrfykRLlBhKgVBuhFdE6MBGG+z8WPP:7OPj9Emow4ImdVRRproFdWMG+tn
Static task
static1
Behavioral task
behavioral1
Sample
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08
-
Size
169KB
-
MD5
c1179cdac74cd2250f8cce790f9b660a
-
SHA1
f80c0a20bb8477857c52ba981a0a7627223c3f32
-
SHA256
aacfc285dd684fd94a01c8ed0e6b5b8a8cd1834208ba37d309d79669c313eb08
-
SHA512
847557904e6e7ee4fd691e8cd388345a4850406c9fb00999fb69d1acbbe69918acb358d27ab7a5a758709a54b318241dea5622bcc1babbc30bf944b8f3f838ec
-
SSDEEP
3072:T3c1fP4AJJX3Y6p8jmow4IRo/PFrfykRLlBhKgVBuhFdE6MBGG+z8WPP:7OPj9Emow4ImdVRRproFdWMG+tn
Score10/10-
Detected phishing page
-
Downloads MZ/PE file
-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-