General
- Target file.exe
- Size 409KB
- Sample230111-h13zaabb53
- SHA256 1e2900a2e5335d8e39efbe152f5b885c9a4a2e44361b85038e96c9eee3da8cbd
- MD5 6f7154c177e01e871024e81536627187
- SHA1 3178a4aa9f72f49b9d2ecb10f850a18da0317064
- SHA512 2c860e7225decdba99b298185306057745116b30bb8b593cc7a72a82296abfe7793984d147e1aa17105776a4cc6b9d245e3723dd9488c7e67b36fc685a969392
- SSDEEP 12288:QewKJ+HHZWeNuvrUgMQlUy2aCTOC9tmG:QewKJ+Zqvr/lUgy
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20220901-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 409KB
- SHA256 1e2900a2e5335d8e39efbe152f5b885c9a4a2e44361b85038e96c9eee3da8cbd
- MD5 6f7154c177e01e871024e81536627187
- SHA1 3178a4aa9f72f49b9d2ecb10f850a18da0317064
- SHA512 2c860e7225decdba99b298185306057745116b30bb8b593cc7a72a82296abfe7793984d147e1aa17105776a4cc6b9d245e3723dd9488c7e67b36fc685a969392
- SSDEEP 12288:QewKJ+HHZWeNuvrUgMQlUy2aCTOC9tmG:QewKJ+Zqvr/lUgy
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL