General
- Target azienda_38.rar
- Size 4KB
- Sample230207-kmlh7aae93
- SHA256 1ff4d346230746c3bb15df0049494d8b7b0807e69e97d5db3da73c96989a5fa6
- MD5 002dddf9b5bcdd839ffa9e8f29f05310
- SHA1 104012dfddbae94c8d8fc68c066f7210cd9fc9a5
- SHA512 3c80608348a6b1e69b4fc17759c880a67d23ed15e09de23087878323e9561ec8f3dc6c6f36739e0ae7352ca6756a3c06016a41abacf865ccff5024243216ed65
- SSDEEP 96:6LTfFh5rFT85Zn5UP/aJDa0koY+J0R6vMiuWEslne33TJKJ8BxZiX:6Xdh5rFT83nE/aJDzkoHuRqHEslqTAi0
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
azienda_38.hta
Resource
win7-20220812-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
azienda_38.hta
Resource
win10v2004-20220812-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target azienda_38.hta
- Size 6KB
- SHA256 4f999cd608ccf9e8cf62e41e2c7a75f50b3c758dbf290e26424d6a5a0acff243
- MD5 aa67a0782f7e8fd0e39b0306ecacfc17
- SHA1 6f8bd5514cffcd413acfe31913fe4b7f12a7ece1
- SHA512 a5c9ae52e1ac5c5fd1100c27dfab234247f14631dbba7900112f55b1cdce0c298416be30a220ac7b94078f03a7fc93527fd76f0acccc68ee014d5b9d58740fbb
- SSDEEP 96:wTgU8LVTUoPg2pwTEeD4b7KdaO3iOaLt3M8Mn3XTPMJsb0ODcFE+Voq3V4dnr96k:pU77rIKdn863jMM0OD9+VVF45x/CI
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.