General
-
Target
spplice.exe
-
Size
63.2MB
-
Sample
231118-rq7zxsef65
-
MD5
5e4f9b40389fa0015a8962c767d4e536
-
SHA1
18582fdba69b8ce64f454d41485b6382c8c5cac2
-
SHA256
1afa194f39d98d5689e8b302f57364f1da76b0da70cf88539e65b4fa0bc63b08
-
SHA512
7532cf790054fa35eb47b33b7594206b8f3d68369d19ff752d84ddf29385dcbd62aa0db409fac722b216e56d6c15f02ad5b37541471e64a498f393cf2453b244
-
SSDEEP
1572864:PQEzy1VM7XNnh+NjpBcr75HoizImKeW8GAg5ldEL7:YEqVM79iV41oiEmBW8GZK7
Static task
static1
Behavioral task
behavioral1
Sample
spplice.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
spplice.exe
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
spplice.exe
-
Size
63.2MB
-
MD5
5e4f9b40389fa0015a8962c767d4e536
-
SHA1
18582fdba69b8ce64f454d41485b6382c8c5cac2
-
SHA256
1afa194f39d98d5689e8b302f57364f1da76b0da70cf88539e65b4fa0bc63b08
-
SHA512
7532cf790054fa35eb47b33b7594206b8f3d68369d19ff752d84ddf29385dcbd62aa0db409fac722b216e56d6c15f02ad5b37541471e64a498f393cf2453b244
-
SSDEEP
1572864:PQEzy1VM7XNnh+NjpBcr75HoizImKeW8GAg5ldEL7:YEqVM79iV41oiEmBW8GZK7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-