General
-
Target
Windows10Upgrade9252.exe
-
Size
6.0MB
-
Sample
230615-sdz9zsaa7z
-
MD5
7da0f1dd7b0e8e883568b42f5184cbec
-
SHA1
fb9ec929827606da12fb3d7594be1837577a5993
-
SHA256
d972e967b79e3a5eaac3f2670c3022cfc85fdae953661093159866129fc36b31
-
SHA512
c8b8d4922754a1d1d54b2d03dd00daace8e3ef3bc593b7910f180f7d9e1cd976da5fb73c8bf8cd3cc91f27c6996e936feee29b9300c0d5360c76b0e5ab15efe3
-
SSDEEP
98304:9vGPYCQkTuGpNF4/E0bGz+KkfUHFJ3codBd9V0TomHzAzYkhxph7vH3Ckht5fDCK:9+PYC9qGp/4MmGz+K6QD9dBd9VKomkzb
Static task
static1
Behavioral task
behavioral1
Sample
Windows10Upgrade9252.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Windows10Upgrade9252.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Windows10Upgrade9252.exe
-
Size
6.0MB
-
MD5
7da0f1dd7b0e8e883568b42f5184cbec
-
SHA1
fb9ec929827606da12fb3d7594be1837577a5993
-
SHA256
d972e967b79e3a5eaac3f2670c3022cfc85fdae953661093159866129fc36b31
-
SHA512
c8b8d4922754a1d1d54b2d03dd00daace8e3ef3bc593b7910f180f7d9e1cd976da5fb73c8bf8cd3cc91f27c6996e936feee29b9300c0d5360c76b0e5ab15efe3
-
SSDEEP
98304:9vGPYCQkTuGpNF4/E0bGz+KkfUHFJ3codBd9V0TomHzAzYkhxph7vH3Ckht5fDCK:9+PYC9qGp/4MmGz+K6QD9dBd9VKomkzb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-