General
-
Target
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa
-
Size
264KB
-
Sample
221202-hb4jhsbh57
-
MD5
54ff25506c32583e8fc5ccfe65a7af70
-
SHA1
664d8c6ad6126566368e2e8c36162ca502ddd0b2
-
SHA256
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa
-
SHA512
dfcc6c4a218ea56ab9f89745e9c0d439239188e8d9f7863a7bd5478fdc0eae150ffdbb76c453f73f2815f0e24ef443d89f3a78b96d1196e7241275b7e540b6f6
-
SSDEEP
3072:D2kG11Gr7agej720MS+FNbOAPGnsMlVfchbAh4f971OQ0zs7J6QNik3:D2kD7agwqB+APgheqK171/37ak3
Static task
static1
Behavioral task
behavioral1
Sample
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa
-
Size
264KB
-
MD5
54ff25506c32583e8fc5ccfe65a7af70
-
SHA1
664d8c6ad6126566368e2e8c36162ca502ddd0b2
-
SHA256
c0965e9fc2e3c529ab75a84292109fa0c305550dc90a891d414e9d8ffb2e53aa
-
SHA512
dfcc6c4a218ea56ab9f89745e9c0d439239188e8d9f7863a7bd5478fdc0eae150ffdbb76c453f73f2815f0e24ef443d89f3a78b96d1196e7241275b7e540b6f6
-
SSDEEP
3072:D2kG11Gr7agej720MS+FNbOAPGnsMlVfchbAh4f971OQ0zs7J6QNik3:D2kD7agwqB+APgheqK171/37ak3
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-