General
-
Target
acacad6f583f41aef322e29aad8e41c2d7ae4e9192fa450da2495934de1744c1
-
Size
1.9MB
-
Sample
221128-ljbegshb6v
-
MD5
db367c514ab76f8d78125f38173f16a3
-
SHA1
952cca78e59b6e2235d128c7f0669e22c552a83d
-
SHA256
acacad6f583f41aef322e29aad8e41c2d7ae4e9192fa450da2495934de1744c1
-
SHA512
a84f043167960be13874951a563c95453760c251e3fa1634a519ac4fa499250f826735ddc30e65fae9bc94cbe0eabeaf71794af6c7ce7d3d462a2d7d9a3df2a1
-
SSDEEP
24576:qTfEWQMHi9jzdDnAOnCncwDg6TX8lXqLwr63mYmHfAlOFpe8Qk+Th/DNs0o+:UcW4fTWTTslXqLw+3m5Al98uTBhs0o+
Static task
static1
Behavioral task
behavioral1
Sample
acacad6f583f41aef322e29aad8e41c2d7ae4e9192fa450da2495934de1744c1.exe
Resource
win7-20221111-en
Malware Config
Extracted
socelars
http://www.zhxxjs.pw/Info/
http://www.allinfo.pw/
Targets
-
-
Target
acacad6f583f41aef322e29aad8e41c2d7ae4e9192fa450da2495934de1744c1
-
Size
1.9MB
-
MD5
db367c514ab76f8d78125f38173f16a3
-
SHA1
952cca78e59b6e2235d128c7f0669e22c552a83d
-
SHA256
acacad6f583f41aef322e29aad8e41c2d7ae4e9192fa450da2495934de1744c1
-
SHA512
a84f043167960be13874951a563c95453760c251e3fa1634a519ac4fa499250f826735ddc30e65fae9bc94cbe0eabeaf71794af6c7ce7d3d462a2d7d9a3df2a1
-
SSDEEP
24576:qTfEWQMHi9jzdDnAOnCncwDg6TX8lXqLwr63mYmHfAlOFpe8Qk+Th/DNs0o+:UcW4fTWTTslXqLw+3m5Al98uTBhs0o+
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-