General
-
Target
562348e8dbd71f796420599713c73c02.exe
-
Size
144KB
-
Sample
230317-xgxeqahe94
-
MD5
562348e8dbd71f796420599713c73c02
-
SHA1
b21c5a26d2a3d7bb06d946397540de919e7acd64
-
SHA256
28fff67a5ec01a9ccd4c5101cdfeaa2a714d90322b39a5b5be4cb48e4ff78ea2
-
SHA512
1ea1dd6ba499830eed943a231b16ac6f7d288d6fc8d4bffed3b0336ee14ba4a9e221d796636a2c19c0aa5f501a2b91366c8600d478ed7e2832638c6e459b3188
-
SSDEEP
3072:OBkoDOa0GfjuYQWOd1nfS9KlTHSsq+dzplmKzBfcnhHKMISCVN/Q:/Vq+pluMMCn/
Static task
static1
Behavioral task
behavioral1
Sample
562348e8dbd71f796420599713c73c02.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
562348e8dbd71f796420599713c73c02.exe
Resource
win10v2004-20230220-en
Malware Config
Extracted
https://kialux.com/images/operator/debug2.ps1
Targets
-
-
Target
562348e8dbd71f796420599713c73c02.exe
-
Size
144KB
-
MD5
562348e8dbd71f796420599713c73c02
-
SHA1
b21c5a26d2a3d7bb06d946397540de919e7acd64
-
SHA256
28fff67a5ec01a9ccd4c5101cdfeaa2a714d90322b39a5b5be4cb48e4ff78ea2
-
SHA512
1ea1dd6ba499830eed943a231b16ac6f7d288d6fc8d4bffed3b0336ee14ba4a9e221d796636a2c19c0aa5f501a2b91366c8600d478ed7e2832638c6e459b3188
-
SSDEEP
3072:OBkoDOa0GfjuYQWOd1nfS9KlTHSsq+dzplmKzBfcnhHKMISCVN/Q:/Vq+pluMMCn/
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-