General
- Target payload.exe
- Size 31KB
- Sample230124-e4ty1agf85
- SHA256 bd45e50b3ec1e76b4cc8c018131921f5237a356b1dcbc9ec69fdf9788edbea58
- MD5 fcf99858964e59b68b0433b135b499bb
- SHA1 817c9144632361468d2e9177d55c9f0598dfd234
- SHA512 6281d9e78f3520c1050ac059679fb0742739077c64e474ac15bde11a221b3f1d1ada2dafd0688490633b36b7a5bd8c2f2833f8232569a4cc3699a69ed09f8463
- SSDEEP 768:Awn0ja6MY6dPBBPkaRx98CCIzQMCzG17bDTjNGy9A:FnTldpRx98izQMCShpGy9A
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Behavioral task
behavioral1
Sample
payload.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target payload.exe
- Size 31KB
- SHA256 bd45e50b3ec1e76b4cc8c018131921f5237a356b1dcbc9ec69fdf9788edbea58
- MD5 fcf99858964e59b68b0433b135b499bb
- SHA1 817c9144632361468d2e9177d55c9f0598dfd234
- SHA512 6281d9e78f3520c1050ac059679fb0742739077c64e474ac15bde11a221b3f1d1ada2dafd0688490633b36b7a5bd8c2f2833f8232569a4cc3699a69ed09f8463
- SSDEEP 768:Awn0ja6MY6dPBBPkaRx98CCIzQMCzG17bDTjNGy9A:FnTldpRx98izQMCShpGy9A
- MD5 SHA1 SHA512 SSDEEP
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file