General
-
Target
INQ 4419-R1.exe
-
Size
420KB
-
Sample
231211-pdwd9aebcn
-
MD5
b85a69cbd2e9dbbb2f5d3141bb942daf
-
SHA1
6f460df7dcbbd0209fcda977a6056086b2e39620
-
SHA256
4cd1a3fabda64aa2ed1c81643bd46bd8698038f0c5be83e408ecd1c4fa175c63
-
SHA512
aace1d881cf6dd109377191a953bc11701686e3d5b79bce0b76d588090c217ea1f5ade50fe83f32428abee67f3af2e22d789a90e8d947a5e71e6d25e7d1ea2c9
-
SSDEEP
12288:RGSuP0Pf27bI2aiCpvcwvuqDqXncc6E8Vy+CwY3zCE:RluPUN2anpBW1XR8Vhij
Static task
static1
Behavioral task
behavioral1
Sample
INQ 4419-R1.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
INQ 4419-R1.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
INQ 4419-R1.exe
-
Size
420KB
-
MD5
b85a69cbd2e9dbbb2f5d3141bb942daf
-
SHA1
6f460df7dcbbd0209fcda977a6056086b2e39620
-
SHA256
4cd1a3fabda64aa2ed1c81643bd46bd8698038f0c5be83e408ecd1c4fa175c63
-
SHA512
aace1d881cf6dd109377191a953bc11701686e3d5b79bce0b76d588090c217ea1f5ade50fe83f32428abee67f3af2e22d789a90e8d947a5e71e6d25e7d1ea2c9
-
SSDEEP
12288:RGSuP0Pf27bI2aiCpvcwvuqDqXncc6E8Vy+CwY3zCE:RluPUN2anpBW1XR8Vhij
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-