General
- Target lidan.exe
- Size 124KB
- Sample230123-pycsmsdb84
- SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
- MD5 2e1ed9a6411f5457e15eb9962d9badc3
- SHA1 bf803cfd24fe8e890e2bf420a9e27567b878f000
- SHA512 b9d3be71b33b9eea68dd7274e7cb587fa5d59c073f134db147a7d74c357d8f5037a75cfa086c838129ec88a3961061f1e8d95ba00d63ceca5db79674df8cf917
- SSDEEP 1536:cqTAZ3SbqVbJhTlNFsV7mt7F/E/8ZhtaOlrttD9zpqN:hu3SuVbblHzcwtaOxttDBpqN
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
lidan.exe
Resource
win7-20221111-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
lidan.exe
Resource
win10v2004-20220812-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target lidan.exe
- Size 124KB
- SHA256 97ead2057976cc989c024fa9ad761549fa57e53b16ca38aeecf3aa70da77c0ea
- MD5 2e1ed9a6411f5457e15eb9962d9badc3
- SHA1 bf803cfd24fe8e890e2bf420a9e27567b878f000
- SHA512 b9d3be71b33b9eea68dd7274e7cb587fa5d59c073f134db147a7d74c357d8f5037a75cfa086c838129ec88a3961061f1e8d95ba00d63ceca5db79674df8cf917
- SSDEEP 1536:cqTAZ3SbqVbJhTlNFsV7mt7F/E/8ZhtaOlrttD9zpqN:hu3SuVbblHzcwtaOxttDBpqN
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.