General
- Target PRE ALERT NOTICE.exe
- Size 441KB
- Sample230119-n316csfg96
- SHA256 83b69ba3e48f2d9d8b9ae995bebb991672a808f47f13fb3a564686a68ddce528
- MD5 1e665944358814c7a804f01e4f1d09f2
- SHA1 a451330e872f906a51e6ec723c47d91088142adf
- SHA512 2007c5676d75c228d34d84043846a1b834704d7945b1a49af33e680c3ccbb81a25e7a921718e0f43a09e8d6cd2b0ac5fe8ef02298cefb955e77eae841d11967a
- SSDEEP 6144:uYa6hBo6v9LwIvr2k1TejlOFeKW7Y+TdHpDFOmeRikQoy5//8Djsca1mHr0dxJ:uY3Bo6vN/j2TlzntpsmIikly53QssWJ
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
PRE ALERT NOTICE.exe
Resource
win7-20220812-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
PRE ALERT NOTICE.exe
Resource
win10v2004-20221111-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target PRE ALERT NOTICE.exe
- Size 441KB
- SHA256 83b69ba3e48f2d9d8b9ae995bebb991672a808f47f13fb3a564686a68ddce528
- MD5 1e665944358814c7a804f01e4f1d09f2
- SHA1 a451330e872f906a51e6ec723c47d91088142adf
- SHA512 2007c5676d75c228d34d84043846a1b834704d7945b1a49af33e680c3ccbb81a25e7a921718e0f43a09e8d6cd2b0ac5fe8ef02298cefb955e77eae841d11967a
- SSDEEP 6144:uYa6hBo6v9LwIvr2k1TejlOFeKW7Y+TdHpDFOmeRikQoy5//8Djsca1mHr0dxJ:uY3Bo6vN/j2TlzntpsmIikly53QssWJ
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext