General
-
Target
3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258
-
Size
70KB
-
Sample
231121-2wf4hahg9w
-
MD5
2c19732b70f22a5cc10d19343efe53f7
-
SHA1
719542843006cc9dd3540a300656837fcd72e8aa
-
SHA256
3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258
-
SHA512
fc5bf68524a44bc01a536525a320d4fbe23d033496651887836f480765e4ec60ecdc95376e1d64165637b60444059fe6720170491994273178b6ce4e9472f129
-
SSDEEP
768:G407txg6CVX762AORxFGPRDEEOsx3n+79Namb3GluLrXCS32na1NzBoFsxHv5rMx:Gd7TGAgFqoQn+mmTCuL7hNzBl55rw3
Static task
static1
Behavioral task
behavioral1
Sample
3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258.dll
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258
-
Size
70KB
-
MD5
2c19732b70f22a5cc10d19343efe53f7
-
SHA1
719542843006cc9dd3540a300656837fcd72e8aa
-
SHA256
3cafe32967cbf5295cd49da4a81b4503d02d8c3a28902e91a5e70d5541ba5258
-
SHA512
fc5bf68524a44bc01a536525a320d4fbe23d033496651887836f480765e4ec60ecdc95376e1d64165637b60444059fe6720170491994273178b6ce4e9472f129
-
SSDEEP
768:G407txg6CVX762AORxFGPRDEEOsx3n+79Namb3GluLrXCS32na1NzBoFsxHv5rMx:Gd7TGAgFqoQn+mmTCuL7hNzBl55rw3
Score8/10-
Blocklisted process makes network request
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-