General
-
Target
83f162b1d468347d857c4e54e4c205547c8a842f0df8be594caf2c482dd96c52
-
Size
5.2MB
-
Sample
231209-lvzlfsfhal
-
MD5
a3a8f17bde5a8c3ea4967703a9c42bf7
-
SHA1
1c23fccdd9a0990e56d71588c6eb35b1100fd6a2
-
SHA256
83f162b1d468347d857c4e54e4c205547c8a842f0df8be594caf2c482dd96c52
-
SHA512
8724d0fae62bd93e2b92f0337f3fe82f174015696277ff747d18a239757e872ce479046904834e3d636af067e4f6318392344ac532b86357159d1a7330aeb2b7
-
SSDEEP
98304:yt5aZvePV9IQE+UHu1L3CNmIqkck3pkZaDR376hz+r9MYpWs:VM98Hmmzualrqz+B
Behavioral task
behavioral1
Sample
BB工作簿.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
BB工作簿.exe
Resource
win10v2004-20231127-en
Malware Config
Targets
-
-
Target
BB工作簿.com
-
Size
5.4MB
-
MD5
ed906ad26c956c45c8d5d665447469ab
-
SHA1
55f51e212172307cb5c991723ed605b949ed2a47
-
SHA256
b362ddc8d9dd9fa16ae2e417db25a4b48c90eeb9f09f50faa761a95f27131736
-
SHA512
96e5a4ce237f327fdc6d8aacec267bcbfef338c53a34831e2f2dd720ee58e9c77e51ee18ab27412909cb57c226bd7468a353455806afae5f9cec660d608c63b5
-
SSDEEP
98304:NgLtEJIF/o4CWdDU3+Sho2cj57mPR8Iqe66ZvQvGlLFN69Vuv3MKkOJNw:NgLiMg4BdDU3+qY0rQGZ/UVuRO
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-