General
-
Target
909ab00f91ab72f4637de733e534bfefacdaef4d66217353726148f73cd13a20
-
Size
3.3MB
-
Sample
221205-hw3gysfe99
-
MD5
524ee4b4df67328653740a764f86a94e
-
SHA1
cdd5153de9b9090b1e5c271a0d0fdb8374746162
-
SHA256
909ab00f91ab72f4637de733e534bfefacdaef4d66217353726148f73cd13a20
-
SHA512
72bdb65abb69e1de05fe7be012f28d4fdb4e3842329c497216624908e3e7e1b50d7aa6f4540e991b6fc59a594931d2315192d0e0dafcd666a68caa020a00579f
-
SSDEEP
98304:7JYC4BP0AwP4unYP+0O8NPKDUDpQCOfCJ+N4dP5CVSu2:7JYBP0Oo8DDpS6Y4c32
Static task
static1
Behavioral task
behavioral1
Sample
909ab00f91ab72f4637de733e534bfefacdaef4d66217353726148f73cd13a20.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
909ab00f91ab72f4637de733e534bfefacdaef4d66217353726148f73cd13a20
-
Size
3.3MB
-
MD5
524ee4b4df67328653740a764f86a94e
-
SHA1
cdd5153de9b9090b1e5c271a0d0fdb8374746162
-
SHA256
909ab00f91ab72f4637de733e534bfefacdaef4d66217353726148f73cd13a20
-
SHA512
72bdb65abb69e1de05fe7be012f28d4fdb4e3842329c497216624908e3e7e1b50d7aa6f4540e991b6fc59a594931d2315192d0e0dafcd666a68caa020a00579f
-
SSDEEP
98304:7JYC4BP0AwP4unYP+0O8NPKDUDpQCOfCJ+N4dP5CVSu2:7JYBP0Oo8DDpS6Y4c32
-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Loads dropped DLL
-
Accesses Microsoft Outlook accounts
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-