General
-
Target
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25
-
Size
1.4MB
-
Sample
231010-n72yfsdc6t
-
MD5
6cb6f00e10402d1cdcbee1d1a1094e79
-
SHA1
a7ac8988aa8554ddfb7b3ad707c0aee83f8a5df3
-
SHA256
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25
-
SHA512
69617b593801508a6a243d15b289b7407babf0aa09b0ba960f40c83b08ae699054a062f5c6430091c871da424ac7cadf2014c47139548d53cbe0994aff6c4d09
-
SSDEEP
24576:vv8K9hcxXwcUlINc6iZOmmdLBR92w0WqXJJ15XncyTdiG0KtYrEH73:8KzcxXMiNc7SpFS1Bjiof
Static task
static1
Behavioral task
behavioral1
Sample
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25
-
Size
1.4MB
-
MD5
6cb6f00e10402d1cdcbee1d1a1094e79
-
SHA1
a7ac8988aa8554ddfb7b3ad707c0aee83f8a5df3
-
SHA256
450f6708cc79f95aa900b34b42a65f1423a0c6d4aa4bbf8cfe9c437cc7c4ef25
-
SHA512
69617b593801508a6a243d15b289b7407babf0aa09b0ba960f40c83b08ae699054a062f5c6430091c871da424ac7cadf2014c47139548d53cbe0994aff6c4d09
-
SSDEEP
24576:vv8K9hcxXwcUlINc6iZOmmdLBR92w0WqXJJ15XncyTdiG0KtYrEH73:8KzcxXMiNc7SpFS1Bjiof
Score8/10-
Downloads MZ/PE file
-
Modifies AppInit DLL entries
-
Modifies Installed Components in the registry
-
Sets file execution options in registry
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-