General
- Target f0016739c32ff1b375e9bf3008a56991.exe
- Size 1.8MB
- Sample230514-1m63wsdf85
- SHA256 e7ebc6c68a23bfb0d6f9d46c14b27b03f4aaeaafbcec81418f10f3bc190d523d
- MD5 f0016739c32ff1b375e9bf3008a56991
- SHA1 c6f1ed811bdcd9c39f0fefbd53af0ee3b693a59b
- SHA512 1c1367828d3bc051aa60c6d764a29ad0e864de649e23943d5c52a354cfd9a7f2de6452359c3f8fbccb34e5af060d99b93b8860f51cc371804548725fab856d73
- SSDEEP 49152:INyYP8XVYvxSb1efaWqHnLJECyjUqldcOR:INyI8FRndHn5QKOR
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
f0016739c32ff1b375e9bf3008a56991.exe
Resource
win7-20230220-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
f0016739c32ff1b375e9bf3008a56991.exe
Resource
win10v2004-20230220-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target f0016739c32ff1b375e9bf3008a56991.exe
- Size 1.8MB
- SHA256 e7ebc6c68a23bfb0d6f9d46c14b27b03f4aaeaafbcec81418f10f3bc190d523d
- MD5 f0016739c32ff1b375e9bf3008a56991
- SHA1 c6f1ed811bdcd9c39f0fefbd53af0ee3b693a59b
- SHA512 1c1367828d3bc051aa60c6d764a29ad0e864de649e23943d5c52a354cfd9a7f2de6452359c3f8fbccb34e5af060d99b93b8860f51cc371804548725fab856d73
- SSDEEP 49152:INyYP8XVYvxSb1efaWqHnLJECyjUqldcOR:INyI8FRndHn5QKOR
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext