General
- Target file.exe
- Size 2.5MB
- Sample221216-thxkbsfa43
- SHA256 ec2eb6345f2e7ef75f0e38a7bd4c60f420a0ff02a8e9b37005855409f0e23aec
- MD5 59b0162612709d8cdd72ca23557ad85f
- SHA1 fca13863218cec25705a9343686b126744273bc1
- SHA512 48e257a0732b0cc9069aa7f56923e1db684db624ad0677cacf556bed0c7beeb2be13407b048f1b907edec87f9e90c5e8bc11743643b6889691339c80e9cc5d90
- SSDEEP 49152:ROjmMTyuRnhrFGnVpVYK/nmO+ZNAuRfnmRqfkjjr:2R7K/nmO+ZNAuR8nr
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20221111-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 2.5MB
- SHA256 ec2eb6345f2e7ef75f0e38a7bd4c60f420a0ff02a8e9b37005855409f0e23aec
- MD5 59b0162612709d8cdd72ca23557ad85f
- SHA1 fca13863218cec25705a9343686b126744273bc1
- SHA512 48e257a0732b0cc9069aa7f56923e1db684db624ad0677cacf556bed0c7beeb2be13407b048f1b907edec87f9e90c5e8bc11743643b6889691339c80e9cc5d90
- SSDEEP 49152:ROjmMTyuRnhrFGnVpVYK/nmO+ZNAuRfnmRqfkjjr:2R7K/nmO+ZNAuR8nr
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL