General
-
Target
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684
-
Size
100KB
-
Sample
221202-hbk26sbh25
-
MD5
33f9f14afe732a83fea4bba9c5095894
-
SHA1
fdde70fc2020fd26b6465968bbe32975e6edac96
-
SHA256
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684
-
SHA512
cd7692d458a383b2b01a9324477cff3d0adebc55298671090b99e4d08ec5d0d93d180013b2dbbeac677a9c8cace481c8ff38cf131f67f3e11c631fa9e02db270
-
SSDEEP
1536:vNs8iAuismywsFeLw0wF9MGM9K/oKtNgCMbA1bL3N+NM5Uf1NIjnZe:2A/KLOM52CnA
Static task
static1
Behavioral task
behavioral1
Sample
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684
-
Size
100KB
-
MD5
33f9f14afe732a83fea4bba9c5095894
-
SHA1
fdde70fc2020fd26b6465968bbe32975e6edac96
-
SHA256
c1b011ea42f010fd508db5e9ff14b07886ad94a28a093ac9f39036197ea6d684
-
SHA512
cd7692d458a383b2b01a9324477cff3d0adebc55298671090b99e4d08ec5d0d93d180013b2dbbeac677a9c8cace481c8ff38cf131f67f3e11c631fa9e02db270
-
SSDEEP
1536:vNs8iAuismywsFeLw0wF9MGM9K/oKtNgCMbA1bL3N+NM5Uf1NIjnZe:2A/KLOM52CnA
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-