General
- Target 003737.exe
- Size 300KB
- Sample230606-gde39scb84
- SHA256 12a06c74a79a595fce85c5cd05c043a6b1a830e50d84971dcfba52d100d76fc6
- MD5 d93dd4200d1997c9b734bc2b1de77dc8
- SHA1 9b96aa19510fd49e13d394017284c325ea81dc7c
- SHA512 9aacc357225cc8462dc6ebdb4c93528ec28796b847788e645865b2a987e501f57cb4c3ba3cc3894971c3a6fc6dc1f3ad207399f7078cdea388629c1c8987e6cf
- SSDEEP 6144:AYa6rb6wHR86N8RbEpztPAZ3IZUOGAdHwWM0g4uGFzq8Mh:AYJbFx86CBEe3Il/LpXukQh
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
003737.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
003737.exe
Resource
win10v2004-20230220-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 003737.exe
- Size 300KB
- SHA256 12a06c74a79a595fce85c5cd05c043a6b1a830e50d84971dcfba52d100d76fc6
- MD5 d93dd4200d1997c9b734bc2b1de77dc8
- SHA1 9b96aa19510fd49e13d394017284c325ea81dc7c
- SHA512 9aacc357225cc8462dc6ebdb4c93528ec28796b847788e645865b2a987e501f57cb4c3ba3cc3894971c3a6fc6dc1f3ad207399f7078cdea388629c1c8987e6cf
- SSDEEP 6144:AYa6rb6wHR86N8RbEpztPAZ3IZUOGAdHwWM0g4uGFzq8Mh:AYJbFx86CBEe3Il/LpXukQh
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext