General
-
Target
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca.bin
-
Size
265KB
-
Sample
230501-ybjr4shf7x
-
MD5
f30050237e1e4b07f13d8b4e4ecf8209
-
SHA1
c80a5cd767b304e9cd89ca8bbfe30b812e02ec14
-
SHA256
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca
-
SHA512
14f145246a8962bec55e36871493a231753bd504c496e5f2e802e464f44688dd5a8f88aeb5c9b29db7ef311c9cc85c4136291f9b61fc449a102d5e4118b4a7d7
-
SSDEEP
6144:vYa6fBRHeTlVyI+pw0KjKtBO6jV82T4YCzjVTPkWTBp5d6:vYdBRYygjW46jVtCtXdpe
Static task
static1
Behavioral task
behavioral1
Sample
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca.bin
-
Size
265KB
-
MD5
f30050237e1e4b07f13d8b4e4ecf8209
-
SHA1
c80a5cd767b304e9cd89ca8bbfe30b812e02ec14
-
SHA256
fe769c40bdc4ba83422c97df176374bb3846f4cc941ecbbfb47383321dfabdca
-
SHA512
14f145246a8962bec55e36871493a231753bd504c496e5f2e802e464f44688dd5a8f88aeb5c9b29db7ef311c9cc85c4136291f9b61fc449a102d5e4118b4a7d7
-
SSDEEP
6144:vYa6fBRHeTlVyI+pw0KjKtBO6jV82T4YCzjVTPkWTBp5d6:vYdBRYygjW46jVtCtXdpe
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-