General
- Target impvqfag - Copy.zip
- Size 91KB
- Sample230323-m468bsfb74
- SHA256 154d12ad7038f0eb13f1824608f0786694daf0fead74ca9f24b333d1744c822d
- MD5 f0f7aea9790fa0210de8516d74e9a5d8
- SHA1 68075565e2d5e20eab63d12a6ebfc1e357915fb6
- SHA512 06e9894b3b234ac90b146571a055e39f57de3a17986708c4988d95498b5becea819e0ef28117f98b18890338848eee97ca51184a65cf7b7fe8d6a2e968197c9e
- SSDEEP 1536:0VT5ik3N/HN4M6PgXhyC5vSAJmYBK9tLL9wAwiiy2c9zA2LPFkSJXYJYfx9XZgz2:0VTsk3N3hjvSArK3LL9BiM9zbLPZXYk1
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
impvqfag - Copy.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target impvqfag - Copy.ex
- Size 168KB
- SHA256 d6d03b39851da54f93d35a89fa243ebc01b45b6f7ed5590605d64bda89fd293d
- MD5 967461d7eaa06cceada0df6b90dc2248
- SHA1 9b0f168f38e990dade84905f8b294e0c83a1a93f
- SHA512 117873b1ca7cf78f4579611f16bc5479b12a63acfec99bd3021b67de5336254337f7c9e5f8fc202dc26109ca2dd3f1e689d15e989662a5cf1dac45d1322aafff
- SSDEEP 3072:KDBXmfDngnSzsevIJqg5IOQI0HQFdWjhf7ybH0WRgg/:EXmfDgbGg5IOQIAhTybDgg
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself