General
-
Target
48fc74f1faeddf127de97272a0fbb1eafa058fae6c0be993b80a144ed515a318
-
Size
274KB
-
Sample
231204-nrgycaah24
-
MD5
a994b2f1117c5fae343258595f44205c
-
SHA1
d46f37c4602bc1e2246d7143e7b2a099445e8782
-
SHA256
48fc74f1faeddf127de97272a0fbb1eafa058fae6c0be993b80a144ed515a318
-
SHA512
99ee6d7667a8a9e49dcd05e5f72ba3e89cb2d4d673450f36e8685e8a13e38974398fc121917daede89c50e145d175d2dc5f0749db066b4f13903b5ae5d8eb5d3
-
SSDEEP
6144:wbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:wPcrfR6ZnOkx2LIa
Behavioral task
behavioral1
Sample
48fc74f1faeddf127de97272a0fbb1eafa058fae6c0be993b80a144ed515a318.exe
Resource
win7-20231023-en
Malware Config
Targets
-
-
Target
48fc74f1faeddf127de97272a0fbb1eafa058fae6c0be993b80a144ed515a318
-
Size
274KB
-
MD5
a994b2f1117c5fae343258595f44205c
-
SHA1
d46f37c4602bc1e2246d7143e7b2a099445e8782
-
SHA256
48fc74f1faeddf127de97272a0fbb1eafa058fae6c0be993b80a144ed515a318
-
SHA512
99ee6d7667a8a9e49dcd05e5f72ba3e89cb2d4d673450f36e8685e8a13e38974398fc121917daede89c50e145d175d2dc5f0749db066b4f13903b5ae5d8eb5d3
-
SSDEEP
6144:wbTirrfykiiUjh6QH/cEOkCybEaQRXr9HNdvOa:wPcrfR6ZnOkx2LIa
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory
-