General
-
Target
test.exe
-
Size
430KB
-
Sample
230414-rdgl7sbf3z
-
MD5
26b81ae52bf2c73d19636e5a364a17ed
-
SHA1
3ce65b5a03e1d3a50b3e07fa66f4f482269d5745
-
SHA256
fadf983d577d2731c074e876bb030be0b76d9fc91abd0a4a54c2b28c6c0b96de
-
SHA512
279232967e33fdd1e3be13122ec43fc5c3eccd5c59395b0d2c66684b016b1ccdb0db96a1b6abf0b9f313ee8e1ae6ef2e25c00d0d205d94223861ca57dc1c9cf1
-
SSDEEP
12288:xgZXEAO/BUdG3gVdt7K1mzRcX3loDHHJv0H:xgZXoZUTVdt7K1wcXVojVc
Static task
static1
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
test.exe
-
Size
430KB
-
MD5
26b81ae52bf2c73d19636e5a364a17ed
-
SHA1
3ce65b5a03e1d3a50b3e07fa66f4f482269d5745
-
SHA256
fadf983d577d2731c074e876bb030be0b76d9fc91abd0a4a54c2b28c6c0b96de
-
SHA512
279232967e33fdd1e3be13122ec43fc5c3eccd5c59395b0d2c66684b016b1ccdb0db96a1b6abf0b9f313ee8e1ae6ef2e25c00d0d205d94223861ca57dc1c9cf1
-
SSDEEP
12288:xgZXEAO/BUdG3gVdt7K1mzRcX3loDHHJv0H:xgZXoZUTVdt7K1wcXVojVc
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-