General
-
Target
d0fb1326496b401393d08b9e39e0238e5651418d7e5c6f1f5fc22824bec35ee7
-
Size
2.5MB
-
Sample
230210-zemhvabe3v
-
MD5
b1a837d1724ad87963475e27d9550dee
-
SHA1
108baa2231c4d5696f8764e931a8defffa5f5a56
-
SHA256
d0fb1326496b401393d08b9e39e0238e5651418d7e5c6f1f5fc22824bec35ee7
-
SHA512
ad177c1aa7a9adcd13bce31e0c19899fbde46c4888c5fd94ebbff931c6a809b94d434190f485ffad6969ee5c949c6f541a07197a597d2235f06aa0b985bdbe3d
-
SSDEEP
49152:bwTKIf5X0xpzfaQCUQLxvD0TQ9DnvwZ+kgxadJCJKJd8h8+vTROVgMC/Z2czqJNW:baKMOpzfahLMCDvwIQdJCQJyh8yVO2M8
Static task
static1
Behavioral task
behavioral1
Sample
d0fb1326496b401393d08b9e39e0238e5651418d7e5c6f1f5fc22824bec35ee7.exe
Resource
win7-20220812-en
Malware Config
Targets
-
-
Target
d0fb1326496b401393d08b9e39e0238e5651418d7e5c6f1f5fc22824bec35ee7
-
Size
2.5MB
-
MD5
b1a837d1724ad87963475e27d9550dee
-
SHA1
108baa2231c4d5696f8764e931a8defffa5f5a56
-
SHA256
d0fb1326496b401393d08b9e39e0238e5651418d7e5c6f1f5fc22824bec35ee7
-
SHA512
ad177c1aa7a9adcd13bce31e0c19899fbde46c4888c5fd94ebbff931c6a809b94d434190f485ffad6969ee5c949c6f541a07197a597d2235f06aa0b985bdbe3d
-
SSDEEP
49152:bwTKIf5X0xpzfaQCUQLxvD0TQ9DnvwZ+kgxadJCJKJd8h8+vTROVgMC/Z2czqJNW:baKMOpzfahLMCDvwIQdJCQJyh8yVO2M8
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-