General
-
Target
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051
-
Size
42KB
-
Sample
221209-rwf4dsdd45
-
MD5
491bad732242b91ec066f8b0774dbb5d
-
SHA1
68974eaec196616ea251e49da195e3cf46be93f7
-
SHA256
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051
-
SHA512
bd019948e8bc70e16bcce3ed6078808496ed1cc974afb020b34453ccfb769550703b539a81ba651a1cce5b43bc2e0b7bf25bcf892ddbba690f5d65e57546adb7
-
SSDEEP
768:U5mSP7S/VTyHwLfsjipmb575BhZVGUjtWvDkX3mMRAZGZV7wnr0yt9Up46b2m4ZI:U5mSP7ST4wDC1BBrJWvIX3mqA+7wnrhh
Static task
static1
Behavioral task
behavioral1
Sample
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051
-
Size
42KB
-
MD5
491bad732242b91ec066f8b0774dbb5d
-
SHA1
68974eaec196616ea251e49da195e3cf46be93f7
-
SHA256
973534cd8737fb6163b794fdfeaecb4541fceed2bf1e8b576a3cb3e942405051
-
SHA512
bd019948e8bc70e16bcce3ed6078808496ed1cc974afb020b34453ccfb769550703b539a81ba651a1cce5b43bc2e0b7bf25bcf892ddbba690f5d65e57546adb7
-
SSDEEP
768:U5mSP7S/VTyHwLfsjipmb575BhZVGUjtWvDkX3mMRAZGZV7wnr0yt9Up46b2m4ZI:U5mSP7ST4wDC1BBrJWvIX3mqA+7wnrhh
Score10/10-
Executes dropped EXE
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Loads dropped DLL
-
Adds Run key to start application
-