General
-
Target
aade19b45231b451f48b0085c555283ade07b0fd66d5ef01124f7d580b17aff0.exe
-
Size
1.1MB
-
Sample
230109-vesyeaad3z
-
MD5
ffa4f108b458ca160dd12acca7952234
-
SHA1
a788d04b3a6386c44b9c4a35c06ec25dacbe6309
-
SHA256
aade19b45231b451f48b0085c555283ade07b0fd66d5ef01124f7d580b17aff0
-
SHA512
d6d7ecd217e40ccc9d2ab79d4ae08150155d43b7b21f8df29a6d7dd7f0c1994344722a16086cb921af5bd0c4d9f6f3844f832e5e905cccd581b6146125937d53
-
SSDEEP
24576:R20MZVq5ovmB+B3iSGf6BKO4qF8tG2pZnhBHjSkl5l/Hlc:R2fVN5slJtG2ph7HPl50
Static task
static1
Behavioral task
behavioral1
Sample
aade19b45231b451f48b0085c555283ade07b0fd66d5ef01124f7d580b17aff0.exe
Resource
win7-20221111-en
Malware Config
Extracted
nymaim
45.139.105.171
85.31.46.167
Targets
-
-
Target
aade19b45231b451f48b0085c555283ade07b0fd66d5ef01124f7d580b17aff0.exe
-
Size
1.1MB
-
MD5
ffa4f108b458ca160dd12acca7952234
-
SHA1
a788d04b3a6386c44b9c4a35c06ec25dacbe6309
-
SHA256
aade19b45231b451f48b0085c555283ade07b0fd66d5ef01124f7d580b17aff0
-
SHA512
d6d7ecd217e40ccc9d2ab79d4ae08150155d43b7b21f8df29a6d7dd7f0c1994344722a16086cb921af5bd0c4d9f6f3844f832e5e905cccd581b6146125937d53
-
SSDEEP
24576:R20MZVq5ovmB+B3iSGf6BKO4qF8tG2pZnhBHjSkl5l/Hlc:R2fVN5slJtG2ph7HPl50
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-