General
- Target b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833
- Size 180KB
- Sample221205-mntmasbd52
- SHA256 b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833
- MD5 51118c55e41910d00c5587d99cbc8317
- SHA1 3fad84f553119d5595fd341b085c43e9e19f6c48
- SHA512 8656991b53fe16ed0933d23102be0a20fae81588ac0d60efabb39f19a87acf36ac434e01477d2896cf057b81f787e0010aadd442b76e9034d3606154e76f6784
- SSDEEP 3072:hyHodVAXY71idPAaWELGzMshNXTDFE+7jF6XTrCk:hyHozAY+oXqFshNTDT756XTR
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833.exe
Resource
win10v2004-20220812-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833
- Size 180KB
- SHA256 b8f8926ca34c228d4cf228098d20422c8774ba686e2ab23117e6c56784c36833
- MD5 51118c55e41910d00c5587d99cbc8317
- SHA1 3fad84f553119d5595fd341b085c43e9e19f6c48
- SHA512 8656991b53fe16ed0933d23102be0a20fae81588ac0d60efabb39f19a87acf36ac434e01477d2896cf057b81f787e0010aadd442b76e9034d3606154e76f6784
- SSDEEP 3072:hyHodVAXY71idPAaWELGzMshNXTDFE+7jF6XTrCk:hyHozAY+oXqFshNTDT756XTR
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application