General
-
Target
DBS.IMG
-
Size
1.2MB
-
Sample
230502-ag1e2shb52
-
MD5
266e3ca963a3bbae9dff800d7f22e204
-
SHA1
b4e87d7a764794b98acae5ec54e018ecad47995c
-
SHA256
4ad4c824651649fca236f7bab751aaa00ba24725a53c6f0700d3b729507a6a8b
-
SHA512
3244078b2167557a21dd526d353c9d4131443ce5ea8df9a4c13a2147ad2e52e9c387c8586eb3cd3c40d58876fc7ae77f1279ceb5ef9248bf252f9c43fff675cf
-
SSDEEP
12288:SZZ2iNvj2vIUMgaw+UzS/soUHBaqLcKc8V5:C1tjCTa8S/2HkqL5
Static task
static1
Behavioral task
behavioral1
Sample
DBS.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
DBS.EXE
-
Size
683KB
-
MD5
7c12f6fec9bc7980dd057bff668edfee
-
SHA1
09581aea5c7737e401181a4c1af42898cb5c363e
-
SHA256
2219e96c7736e6edc02fe0ff151ee8e0116b8b0dbcf38d7ee91ab246b4fed0a0
-
SHA512
906cd2e4515d224b223675c015e0afcde2d7c8bafa9b316a4f49710d9ebb9a67c26e316e02b34953d4e1507fcff72d4d52ef4e608368165debe72158512e43b2
-
SSDEEP
12288:PZZ2iNvj2vIUMgaw+UzS/soUHBaqLcKc8V5:n1tjCTa8S/2HkqL5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext
-