General
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.22126.16591.exe
-
Size
893KB
-
Sample
221129-ll2z8aga45
-
MD5
55d6460392408d1325c18b69a91c28e3
-
SHA1
405847d03be406a0025eda76852dfd46420a8d7a
-
SHA256
d1e9780a620ddf149c2aed319388bca7ed690c2a58c9ffc8f60b1c4515115dc9
-
SHA512
d0795dbf40d938ef236ef04a21836a95b49357d7a8f627e346bcace64e36ef8e3399c110d49fa5153f232938d0c5acfa197f8fbba9a15ea3bc50945287703c10
-
SSDEEP
12288:0cAqU+IQ+9ex4JzGcE3mcN553siNii9+M7SJNlMQ8LYbm8fv+/nFRDdzoa1cfN:dB+NdrE3mID3hlnSZMQ8UP+/FRDdEPf
Static task
static1
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.22126.16591.exe
Resource
win7-20221111-en
Malware Config
Extracted
formbook
n2hm
XCeG4IxNKbAl
YzJWbnC+El84nA==
KAJcdmP8yEcO5LXPCFF42Wfb
I+J+xYO95GJQWVU=
GtgxPPv3FmQmhw==
Og9NYF4xEl+j7vGTR93xvg==
506Cg07bsT0G6yK+A96H0h35V+JLkwI=
wAYXFN+pSFIXgQ==
ijzLI/f+FmQmhw==
UfT2PweNm+w8
GQWVw5aZnfF/kS5e
30BKYjua9zcA7gAwsPUngLnjyrBNEgo=
AM65OrmyFmQmhw==
VSlTVxISZ4J/kS5e
GGKj6K33SRh6e0/YzT5nQGlK5CXRqw==
B9H98cUUfX+AWOqiTA==
MxVffWOIoVnM37zrd2sTaOY=
z6bxCgG/mGhR7oDzQA==
pQgSLSRi6AK3M/PdArpX
6rRRsYuSnXx/kS5e
tJRNn0ias3Yw
7c4NEQLSp/R/kS5e
TJmwu5Aa/IuRHtoXXQ==
TLoRUygkiJQE5GoRji0aff0=
Y83qB/DsQFYeZzahj6pYqw==
Bup2q3PHFmQmhw==
cDTa78WEWaYMdoDdArpX
28Rw4MRMnjT52raaTR5KhtMJYa8=
WydpZS7v/4XubCZuhkdxP2OAKdyK68u6
B+osKudaL8yAV/K/VAH3T+Q=
qVz9Y0QD3TGeM/PdArpX
+r49VzlFXLpFegdyc4q5ow==
gsXk990afa1hl6ATTA==
XkblOQWRaet/kS5e
4TNPSf2OcfNk9cfPCFF42Wfb
NaIIUEoRdKYr
ITSqBfn5FmQmhw==
KPRUmWnqxVE0hERFtyo=
VLzd1qk6E5wNcQ49KnmhAoT3Ok5roMK4kQ==
65jM2pKJ8EIST04=
I3+JoYVgYgDiv3O15Ntvw0On/sJroMK4kQ==
C+YhNzH20aCpy8MqVw==
yBZRl4HdPn+RHtoXXQ==
pGQATg0mMfntSBR9c4q5ow==
YUKFixIRdKYr
Hv+C4cZTOMAKV+/dArpX
MVW+PJpyCVA=
FX2AJYBFYbgk
/cX1CsjSpvU+
fWoThWagDVhBHt4yMjWQifM=
/vCd69xrS8QwuCt/yD8=
GvAsSzbCRxplG582TKzVug==
S6zlGfJ6DFc4TBNUvig=
k0z/QwnTpfR/kS5e
KPofKfkPcoRqxowFuWWNhvM=
Xrj+JvENc3yBln4OUw==
ScTatpYj/IKRHtoXXQ==
vLRdwbLyTpzFn+dAR93xvg==
mLTJe/eFp2kxl69W
Cbr5/dRQbio2P/e8ay0aff0=
xooviWn51V7DI7mMOwWT4lCIJUlf
l0t7fTmLqSCAuIYIVA==
06xFejwYMSkbfETTiNT21O0=
bWzTF+1nS4kxlydW
madamkikkiey.net
Targets
-
-
Target
SecuriteInfo.com.Win32.CrypterX-gen.22126.16591.exe
-
Size
893KB
-
MD5
55d6460392408d1325c18b69a91c28e3
-
SHA1
405847d03be406a0025eda76852dfd46420a8d7a
-
SHA256
d1e9780a620ddf149c2aed319388bca7ed690c2a58c9ffc8f60b1c4515115dc9
-
SHA512
d0795dbf40d938ef236ef04a21836a95b49357d7a8f627e346bcace64e36ef8e3399c110d49fa5153f232938d0c5acfa197f8fbba9a15ea3bc50945287703c10
-
SSDEEP
12288:0cAqU+IQ+9ex4JzGcE3mcN553siNii9+M7SJNlMQ8LYbm8fv+/nFRDdzoa1cfN:dB+NdrE3mID3hlnSZMQ8UP+/FRDdEPf
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-