General
-
Target
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5
-
Size
56KB
-
Sample
221128-lbzgcagf3v
-
MD5
b839cff17c188669902938d8327491b1
-
SHA1
ecd190ba89be8207269ea1ac3f2deeb0caae75ac
-
SHA256
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5
-
SHA512
b010b7528088883685eb1ed3247853496e032e9d8cbef90cd7796fa489e77e65f0e96a95b1edc2a4dd060583ea8a624aeba75731dff2d92d8dabc3b04329be3d
-
SSDEEP
768:P2vpjo938KxN9tpdC7EezJ0dBhPUtrFRtFtg3NojiwvuccA4iiKahtAZchlgsu:opjhKdk7ESurhParNMKnFfiroZchlgs
Behavioral task
behavioral1
Sample
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5
-
Size
56KB
-
MD5
b839cff17c188669902938d8327491b1
-
SHA1
ecd190ba89be8207269ea1ac3f2deeb0caae75ac
-
SHA256
42ab6f64da6488461a14bf5fc425338cd18d5f554fcc67216167e863fd4c3ad5
-
SHA512
b010b7528088883685eb1ed3247853496e032e9d8cbef90cd7796fa489e77e65f0e96a95b1edc2a4dd060583ea8a624aeba75731dff2d92d8dabc3b04329be3d
-
SSDEEP
768:P2vpjo938KxN9tpdC7EezJ0dBhPUtrFRtFtg3NojiwvuccA4iiKahtAZchlgsu:opjhKdk7ESurhParNMKnFfiroZchlgs
Score10/10-
Executes dropped EXE
-
Sets DLL path for service in the registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Creates a Windows Service
-
Drops file in System32 directory
-