General
- Target decryp.exe
- Size 18KB
- Sample230918-v225labb2y
- SHA256 24d8b33ffceaa0cee17a6258d39be1317672fc481c889822cf38963e3eb488c2
- MD5 0bddede8897d9d810f34d4eab1f6f07a
- SHA1 b0b74c8a73699f93915154826ba8cfebe92c1dd4
- SHA512 ae2e6cd9495b54c6fc9c4c27ece37bf0719bf42bd9c5bba4a29782f50d127d6a32461a405d9014b311e9de51d0ffc7c6001f9dbcdbbde94a92a2c51e661fe1fa
- SSDEEP 384:3G1LKciD3h+fRSsBS9UpM8WefjHYc0wu:3G1LK1/sBS978/fTYc0wu
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
decryp.exe
Resource
win7-20230831-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
decryp.exe
Resource
win10v2004-20230915-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target decryp.exe
- Size 18KB
- SHA256 24d8b33ffceaa0cee17a6258d39be1317672fc481c889822cf38963e3eb488c2
- MD5 0bddede8897d9d810f34d4eab1f6f07a
- SHA1 b0b74c8a73699f93915154826ba8cfebe92c1dd4
- SHA512 ae2e6cd9495b54c6fc9c4c27ece37bf0719bf42bd9c5bba4a29782f50d127d6a32461a405d9014b311e9de51d0ffc7c6001f9dbcdbbde94a92a2c51e661fe1fa
- SSDEEP 384:3G1LKciD3h+fRSsBS9UpM8WefjHYc0wu:3G1LK1/sBS978/fTYc0wu
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.