General
-
Target
e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a.7z
-
Size
104.3MB
-
Sample
230508-nn5j8sad52
-
MD5
a5ec3cc8b641474e277c8277d228c490
-
SHA1
1b1981e09fda2880f6d2914ed8c42c6915376138
-
SHA256
c787cef9e7216be955d5f4ff7b305f3f08d1d283ac3f09a01f821bf7b2d4a9a2
-
SHA512
f47331c336bd51fe1594f7bcd414d19c881954205cb5e9e4c0bd964efe1be9ac5f262fb35cf77abba4ad470a2e24f9611329f4a36679d75760664e8055dd8677
-
SSDEEP
3145728:dXmm9U2pg/nJSeKHDUc2FofSxwj3WpAerPQ1:xmGU2pgP0HDUc2PA3Ek1
Static task
static1
Behavioral task
behavioral1
Sample
e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a/activator.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a/activator.exe
-
Size
34.0MB
-
MD5
ec78b42d48246195cbe1180360681b90
-
SHA1
017ec0ac62f7512c990e6d07b1399861d6e8c4f5
-
SHA256
e1dc058fc8282acb95648c1ee6b0bc36b0d6b5e6853d4f602df5549e67d6d11a
-
SHA512
a461829596bfd050c733a38c83cdefc53f1b6c6ce48c3f14b7eaaf867bd58a87a19b17c9bbcfea5883e27c7547da8e2c78ea6ed8086986c4aa1c2de50c763dd4
-
SSDEEP
393216:bcvSm8PjCEyF74qWuRTk15Bot2FCHMA28a2M/a16fPHEZe9tY1bTqE:bcD87qBW2XwoHMA28ae6fzY1b2E
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-