General
-
Target
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6
-
Size
4KB
-
Sample
230331-jml92sgh57
-
MD5
dfbb4521b0b51a88e7fcc59e6b140ef6
-
SHA1
b1e65c96e931c5bc6a1eff0e23d31ef8d99c72c9
-
SHA256
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6
-
SHA512
5d4e53d809b01ab515b7f7af69573d5da7b9e4df2898e5bc2636b408d7b52d4f71a5237756926b5a58a7029d58a9892a776228302320f7a9964583004590550c
-
SSDEEP
48:Zdni+Wyi18DN0nCvTaE6nc9fhXcGEY3sJd9ga91RssNnA7B8mOo4jUx7OtKGc:Z0v4mUWKh9ctgC1RnNnKymV44Sh
Static task
static1
Behavioral task
behavioral1
Sample
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6
-
Size
4KB
-
MD5
dfbb4521b0b51a88e7fcc59e6b140ef6
-
SHA1
b1e65c96e931c5bc6a1eff0e23d31ef8d99c72c9
-
SHA256
3e0ff50184e04798a2a0c55dd39f482ebfd821668fc00e896c05b2692030dbd6
-
SHA512
5d4e53d809b01ab515b7f7af69573d5da7b9e4df2898e5bc2636b408d7b52d4f71a5237756926b5a58a7029d58a9892a776228302320f7a9964583004590550c
-
SSDEEP
48:Zdni+Wyi18DN0nCvTaE6nc9fhXcGEY3sJd9ga91RssNnA7B8mOo4jUx7OtKGc:Z0v4mUWKh9ctgC1RnNnKymV44Sh
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-