General
-
Target
OfficeClickToRun.exe
-
Size
5.0MB
-
Sample
230516-we39taba5v
-
MD5
305b489297b55ca1a0ea90104635a57d
-
SHA1
70f6653d653b8aa1727241d687e75e10e8113412
-
SHA256
09b25f421a7e8beda58978dfc5ddea254d59c595dcac7f2ed8f799963111ae9b
-
SHA512
cfc4ea7b324aa3891df390b0f535a69b625100216d87a214e18e51f34aa4043cadefa718912c483bf39c497a195b5abbc418e8e5bd75f942ed47c751b29c7466
-
SSDEEP
98304:hgrgH1HJzOyoKD1i5D+ZAzruaI6HMaJTtGbd:eK1ppoKxi5DQVaI6HMaJTtGbd
Static task
static1
Behavioral task
behavioral1
Sample
OfficeClickToRun.exe
Resource
win10v2004-20230221-en
Malware Config
Targets
-
-
Target
OfficeClickToRun.exe
-
Size
5.0MB
-
MD5
305b489297b55ca1a0ea90104635a57d
-
SHA1
70f6653d653b8aa1727241d687e75e10e8113412
-
SHA256
09b25f421a7e8beda58978dfc5ddea254d59c595dcac7f2ed8f799963111ae9b
-
SHA512
cfc4ea7b324aa3891df390b0f535a69b625100216d87a214e18e51f34aa4043cadefa718912c483bf39c497a195b5abbc418e8e5bd75f942ed47c751b29c7466
-
SSDEEP
98304:hgrgH1HJzOyoKD1i5D+ZAzruaI6HMaJTtGbd:eK1ppoKxi5DQVaI6HMaJTtGbd
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-