General
-
Target
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96
-
Size
240KB
-
Sample
221202-gz4zhsdh5x
-
MD5
e5989b9fe28d1d55fc18fd1453ddfaa3
-
SHA1
6ff8f03ec86354268022c06ca8a6405d16c3201b
-
SHA256
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96
-
SHA512
79a7057dfd16b1e986dde8e55d6029791bb62804a5fef80381edc8558d0fa037356c981fdd9333855b5ed863ee1b292e7be81b5f3de593ab56234142825625ce
-
SSDEEP
6144:Zj3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliDI6:ZjdQKjeaEEpF
Static task
static1
Behavioral task
behavioral1
Sample
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96
-
Size
240KB
-
MD5
e5989b9fe28d1d55fc18fd1453ddfaa3
-
SHA1
6ff8f03ec86354268022c06ca8a6405d16c3201b
-
SHA256
f79a489c62bbd57991c7cbf76282413cf1a0a6ac060d778c2f7f515b142cec96
-
SHA512
79a7057dfd16b1e986dde8e55d6029791bb62804a5fef80381edc8558d0fa037356c981fdd9333855b5ed863ee1b292e7be81b5f3de593ab56234142825625ce
-
SSDEEP
6144:Zj3dwqsNTNEXGlQR58EqxF6snji81RUinKq3aEESliDI6:ZjdQKjeaEEpF
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-