General
- Target azienda_02.rar
- Size 4KB
- Sample230207-kmklwsae73
- SHA256 3c0b6dabe9236fae0903267518fae1236a76ed847c8339bf72ad8efea16c6e2e
- MD5 2d048d458542a50c79ea795540c1ed91
- SHA1 771ee9df9d6414a6d866f3434ef49d6e6c351ccf
- SHA512 0fcc17ecc417f19ccef287743afee02eb48733ef3c2bbbc07d65bcb248c78a81d4183896472dabed917ca9dd895501651a790c9f728fab038dcede84f44d7606
- SSDEEP 96:E6Ddc+a6f20XJtD0w+8L2olKIBIFoAU/xMxvXt0SBOLK35dduGtxE:c+zf2gJtIw+EHluFoAcx80wOLKJdY
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
azienda_02.hta
Resource
win7-20221111-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
azienda_02.hta
Resource
win10v2004-20221111-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target azienda_02.hta
- Size 6KB
- SHA256 d053cd2fb41966e2006baaeff5d4362243a2920bfa6756ed1bc711a05b2d3fee
- MD5 94045dbfad80169ceafd5bf795e93830
- SHA1 98fd2109c6f3cce147cee19b1c8d4119773869a6
- SHA512 e129f6fc4ba9ac817bc4ac7d59208c98abf61e5770507b4ee01efb5d6f477d432363a2898869559ab1baf9b724897ccf8dac9e9dabffdbf7de9abc9e92fc6aa8
- SSDEEP 192:SbUtU77rIKdn863jMM0OD9+VVF48xYkuX:SYE7EOM7/F4kuX
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.