General
-
Target
b82cdb72cccf8b5e76d6e6bcd53902ec.exe
-
Size
1.7MB
-
Sample
221228-zl1daabf25
-
MD5
b82cdb72cccf8b5e76d6e6bcd53902ec
-
SHA1
427985611725328676a2cf0158699a5d8d4424d4
-
SHA256
7ef2d7696df8f2462e4d019f53a96eba218bdce1ac0ee154c636b421e9aa3280
-
SHA512
26bda75082c3ea040ee9fa880748f4a7ab48dcac9bf04db4cc2650a1dfe5121aff7087613a05aa002bdc1c343d28f1b8e5a03adf44473fba8c328931a1a85db8
-
SSDEEP
24576:OpnigZ3x0D2cYBw9X0SJP235pt6+fsC8ID2V/7BrwkciBUT7gjUXyUPTruVAUkxh:0i+3qlJO37fsjIDIukci+TkkysXSS9Nd
Static task
static1
Behavioral task
behavioral1
Sample
b82cdb72cccf8b5e76d6e6bcd53902ec.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
b82cdb72cccf8b5e76d6e6bcd53902ec.exe
-
Size
1.7MB
-
MD5
b82cdb72cccf8b5e76d6e6bcd53902ec
-
SHA1
427985611725328676a2cf0158699a5d8d4424d4
-
SHA256
7ef2d7696df8f2462e4d019f53a96eba218bdce1ac0ee154c636b421e9aa3280
-
SHA512
26bda75082c3ea040ee9fa880748f4a7ab48dcac9bf04db4cc2650a1dfe5121aff7087613a05aa002bdc1c343d28f1b8e5a03adf44473fba8c328931a1a85db8
-
SSDEEP
24576:OpnigZ3x0D2cYBw9X0SJP235pt6+fsC8ID2V/7BrwkciBUT7gjUXyUPTruVAUkxh:0i+3qlJO37fsjIDIukci+TkkysXSS9Nd
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-