General
-
Target
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc
-
Size
2.2MB
-
Sample
221204-mgtcyseb61
-
MD5
323fd8b24670ca7ebe62f9022da32e49
-
SHA1
71cb3655c69c0fc8a9934f6bbcb3a77245fde38d
-
SHA256
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc
-
SHA512
8b5e0f891f1d2410d40519ba7a9b7b989080cde36e056106979ec7b204cdbb189c0d0cc9fedb08f537e9a1e6e545aee0a9c33657be738c29d089abdd4e1788e5
-
SSDEEP
24576:h1OYdaOdqU2Uzf5GilCfBJyzWSdDBXEZc78KU88SuAhrpzcu:h1OsTqBI5GilCfMZvhhrlv
Static task
static1
Behavioral task
behavioral1
Sample
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc
-
Size
2.2MB
-
MD5
323fd8b24670ca7ebe62f9022da32e49
-
SHA1
71cb3655c69c0fc8a9934f6bbcb3a77245fde38d
-
SHA256
af72e5679a8f7112efd067c9cffed247c7788c681e9814118bcc6a0979f791cc
-
SHA512
8b5e0f891f1d2410d40519ba7a9b7b989080cde36e056106979ec7b204cdbb189c0d0cc9fedb08f537e9a1e6e545aee0a9c33657be738c29d089abdd4e1788e5
-
SSDEEP
24576:h1OYdaOdqU2Uzf5GilCfBJyzWSdDBXEZc78KU88SuAhrpzcu:h1OsTqBI5GilCfMZvhhrlv
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-