General
- Target azienda_28.rar
- Size 4KB
- Sample230207-kmk8esae87
- SHA256 a26d98cb5bbca932c7fe3e544ba76b2121c82628486cb8215b8d199c23499d90
- MD5 64a4e29f24ece363b4c1f29c465cd15b
- SHA1 84e7a00e73abafa81f06fcfd40f0fd0737027730
- SHA512 90d255b58d97c830b80546d1bcc8cd7853e24ccbb92cd4f53ab6db53f4ddd13495e50adad9dfa92031a4e39612a3d4cf5dda75a6555fb856d6577f95b601d516
- SSDEEP 96:wdijzKPPKiePT/C9MmIZOy9P3NJDwqtYlVzw5qsAgsH08MdL:6ijmPibHm+9P3NJETzLgWkL
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
azienda_28.hta
Resource
win7-20220901-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
azienda_28.hta
Resource
win10v2004-20220812-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target azienda_28.hta
- Size 6KB
- SHA256 0e34b4a7b619cef883e796c0665810814f9455e166cc7b15111b431933978f12
- MD5 3247f4e6865474d3e72db0e35b1398d7
- SHA1 f9d7dbeec832253e17fd487d489b7ddd17cf3a96
- SHA512 c346f300cbfe78a27eb8d3914da725b7d38d067486d3d136409c8b0ea4749df57127782b7a90e354d5c2dd7142f4b62ebf610b87ba236b6403afab88b275f704
- SSDEEP 192:IRHBWU77rIKdn863jMM0OD9+VVF4vx4kuO:IRL7EOM7/F4XuO
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.