General
-
Target
bf26780603ac0b0d83011772fbc3081537e8175439625c498cb02aae6e9b482f
-
Size
862KB
-
Sample
221129-rjlhcafg86
-
MD5
8dedabbc588d3040aa709afbc58e8a52
-
SHA1
061c10df4f1dbe57e69ff2e99a0ebab4150e9449
-
SHA256
bf26780603ac0b0d83011772fbc3081537e8175439625c498cb02aae6e9b482f
-
SHA512
137bd1febee353872c89ddf2ffc39d9326ab3f604ca73a5b9a64de2705d50494b9ec27326cd7bee24c66bcdcff04bb431b1b72b50dc3a6357585303b3bce37f1
-
SSDEEP
24576:X260/omfb7AGpUIiyLHw+tbt1Ihjqplwqf3w1Mk:Wdp6ycYbtWol7q
Static task
static1
Behavioral task
behavioral1
Sample
bf26780603ac0b0d83011772fbc3081537e8175439625c498cb02aae6e9b482f.exe
Resource
win7-20220901-en
Malware Config
Targets
-
-
Target
bf26780603ac0b0d83011772fbc3081537e8175439625c498cb02aae6e9b482f
-
Size
862KB
-
MD5
8dedabbc588d3040aa709afbc58e8a52
-
SHA1
061c10df4f1dbe57e69ff2e99a0ebab4150e9449
-
SHA256
bf26780603ac0b0d83011772fbc3081537e8175439625c498cb02aae6e9b482f
-
SHA512
137bd1febee353872c89ddf2ffc39d9326ab3f604ca73a5b9a64de2705d50494b9ec27326cd7bee24c66bcdcff04bb431b1b72b50dc3a6357585303b3bce37f1
-
SSDEEP
24576:X260/omfb7AGpUIiyLHw+tbt1Ihjqplwqf3w1Mk:Wdp6ycYbtWol7q
-
Executes dropped EXE
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-