General
- Target DSG2011001_INV+PL.exe
- Size 308KB
- Sample230209-hlchsage92
- SHA256 f4a6e60a7ee010bef6cb4ea0d9548d48ca5d7415336feff957eed8c043ead2b1
- MD5 4b75a6e118d94db850863558197d5f21
- SHA1 aa8d6f692c189ac89795020a0933b28cd6f82a90
- SHA512 463fea084f2957ae4bf61cfb80c990e50babd22a7589eacbd66d6e0f0b7f19afeb3a3b3bb81bd7700e04b7a944d7b286653e2ab68695a9de4405ec2ed7ea779a
- SSDEEP 6144:vYa67XLqVXgnM/7xu2z2sW3txgC7/RdAAKIv1WMOtjAwrvMa:vYhX6/7/2sW3ti2h9W9tjVvL
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
DSG2011001_INV+PL.exe
Resource
win7-20221111-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
DSG2011001_INV+PL.exe
Resource
win10v2004-20221111-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target DSG2011001_INV+PL.exe
- Size 308KB
- SHA256 f4a6e60a7ee010bef6cb4ea0d9548d48ca5d7415336feff957eed8c043ead2b1
- MD5 4b75a6e118d94db850863558197d5f21
- SHA1 aa8d6f692c189ac89795020a0933b28cd6f82a90
- SHA512 463fea084f2957ae4bf61cfb80c990e50babd22a7589eacbd66d6e0f0b7f19afeb3a3b3bb81bd7700e04b7a944d7b286653e2ab68695a9de4405ec2ed7ea779a
- SSDEEP 6144:vYa67XLqVXgnM/7xu2z2sW3txgC7/RdAAKIv1WMOtjAwrvMa:vYhX6/7/2sW3ti2h9W9tjVvL
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext