General
-
Target
8ccb5b14b1df274cef16b76c3c47ff2678120c1077b6f2cbbaee17ed3c723db2
-
Size
6.0MB
-
Sample
230302-12hnvaef3t
-
MD5
fc5d56f6df38b1e979398817fb3f4137
-
SHA1
ba917d021511621cf2bc2db592bfd3fa3b3c61f0
-
SHA256
8ccb5b14b1df274cef16b76c3c47ff2678120c1077b6f2cbbaee17ed3c723db2
-
SHA512
e892ba5d42ac373bbc273c1c568b3735a8dfb93b178848a89abbe6950a306d53fb8ca48b405762e123ff6c8b7860d4d2f4d943a46fed6ca364a3f46648cf9ec4
-
SSDEEP
98304:7aiNAZ/YjRtNDcn2BlJPD8Nzl2bT8mRaw8GFvuztrxcwIVUkTNYLWe0W6AF:FgUnt8NPLwJ+VfIVUkTQ56
Behavioral task
behavioral1
Sample
8ccb5b14b1df274cef16b76c3c47ff2678120c1077b6f2cbbaee17ed3c723db2.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
8ccb5b14b1df274cef16b76c3c47ff2678120c1077b6f2cbbaee17ed3c723db2
-
Size
6.0MB
-
MD5
fc5d56f6df38b1e979398817fb3f4137
-
SHA1
ba917d021511621cf2bc2db592bfd3fa3b3c61f0
-
SHA256
8ccb5b14b1df274cef16b76c3c47ff2678120c1077b6f2cbbaee17ed3c723db2
-
SHA512
e892ba5d42ac373bbc273c1c568b3735a8dfb93b178848a89abbe6950a306d53fb8ca48b405762e123ff6c8b7860d4d2f4d943a46fed6ca364a3f46648cf9ec4
-
SSDEEP
98304:7aiNAZ/YjRtNDcn2BlJPD8Nzl2bT8mRaw8GFvuztrxcwIVUkTNYLWe0W6AF:FgUnt8NPLwJ+VfIVUkTQ56
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-