General
-
Target
sdrt5060.exe
-
Size
17.0MB
-
Sample
230526-mwmhysfa99
-
MD5
7653f84229da2f954ceec3021097135f
-
SHA1
cbc1d4b75c1eaf0fa6cc63e9326c8ab969b4ad1c
-
SHA256
e36f90c4556a391fbaf7eaa998a36b8c1361b430583391c7e9c82d8bb2acae0a
-
SHA512
8118dcd9d8c494a17a9a2e41f4f8c09a696bd15eaaedd75682052a6488fe28a5ca1a2375d5da0b1e5f462b141cbd36a90d9a6a79317c8d961bf224bbb9787396
-
SSDEEP
393216:8A5V+q/FQZkUIJqSmBjFRHcvaQRHm/x/WabYCEfz3:r5VASmRuaQRHmDbEfz3
Static task
static1
Behavioral task
behavioral1
Sample
sdrt5060.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
sdrt5060.exe
Resource
win10v2004-20230221-en
Malware Config
Targets
-
-
Target
sdrt5060.exe
-
Size
17.0MB
-
MD5
7653f84229da2f954ceec3021097135f
-
SHA1
cbc1d4b75c1eaf0fa6cc63e9326c8ab969b4ad1c
-
SHA256
e36f90c4556a391fbaf7eaa998a36b8c1361b430583391c7e9c82d8bb2acae0a
-
SHA512
8118dcd9d8c494a17a9a2e41f4f8c09a696bd15eaaedd75682052a6488fe28a5ca1a2375d5da0b1e5f462b141cbd36a90d9a6a79317c8d961bf224bbb9787396
-
SSDEEP
393216:8A5V+q/FQZkUIJqSmBjFRHcvaQRHm/x/WabYCEfz3:r5VASmRuaQRHmDbEfz3
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-