General
-
Target
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b
-
Size
132KB
-
Sample
221202-g1a3tsdh6z
-
MD5
a9cd1d28e8169c23f6434a4bcb71079f
-
SHA1
21802feb7239ba01357fdde4ac2141e1e102e78e
-
SHA256
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b
-
SHA512
592352bc9a09314190e6da252248ed2b3d28509ee9f8b745731ddf3803fbc175af99bb7fe3b3e5e81c6d01bf1fc74ee38c28f82bb6954bd38970e1292e4f5495
-
SSDEEP
1536:B5g2SQl9LWYdNX9jLEuD9hJx8ghgNMCI+yczZM:AEnLW+NX9jL7hR+NTWKZM
Static task
static1
Behavioral task
behavioral1
Sample
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b
-
Size
132KB
-
MD5
a9cd1d28e8169c23f6434a4bcb71079f
-
SHA1
21802feb7239ba01357fdde4ac2141e1e102e78e
-
SHA256
f61957fec55ace371566a67f137e6dfb0a10ef5bde54cc9c098f3d7f4459b94b
-
SHA512
592352bc9a09314190e6da252248ed2b3d28509ee9f8b745731ddf3803fbc175af99bb7fe3b3e5e81c6d01bf1fc74ee38c28f82bb6954bd38970e1292e4f5495
-
SSDEEP
1536:B5g2SQl9LWYdNX9jLEuD9hJx8ghgNMCI+yczZM:AEnLW+NX9jL7hR+NTWKZM
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-