General
-
Target
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262.exe
-
Size
10KB
-
Sample
221204-m4fqdacd46
-
MD5
1ea89a5498e3186ded51fae0918bc5de
-
SHA1
1a0262c0bc94fcd4acf7d630d4751e3b0811862c
-
SHA256
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262
-
SHA512
297daa54064a7f418de6670a7ccb7c586ca3cda29b06bb76dac88cfd57c671e9fea24f616431298a5c2537313fb15f0ad5eca4de3aa657dcf963ce59a4b1cdce
-
SSDEEP
192:pMdoBVS5EEboY3zNIQgHVSrmSGmX+jBaRCTfbT:bS5EEb7jNIQgHVSrmgqBmofb
Static task
static1
Behavioral task
behavioral1
Sample
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
http://193.149.187.161/obfuscated.vbs
Targets
-
-
Target
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262.exe
-
Size
10KB
-
MD5
1ea89a5498e3186ded51fae0918bc5de
-
SHA1
1a0262c0bc94fcd4acf7d630d4751e3b0811862c
-
SHA256
79fcf442e09508c975fed47442355cf7af5ec310343f0f7050328f6e5d563262
-
SHA512
297daa54064a7f418de6670a7ccb7c586ca3cda29b06bb76dac88cfd57c671e9fea24f616431298a5c2537313fb15f0ad5eca4de3aa657dcf963ce59a4b1cdce
-
SSDEEP
192:pMdoBVS5EEboY3zNIQgHVSrmSGmX+jBaRCTfbT:bS5EEb7jNIQgHVSrmgqBmofb
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-