General
-
Target
d66ede99ee7b9bc03ef4d6dd791c3b80
-
Size
208KB
-
Sample
231222-spa48safe6
-
MD5
d66ede99ee7b9bc03ef4d6dd791c3b80
-
SHA1
7db1fbeca30e9d87d64ce3e47a9e3473a6787098
-
SHA256
cfe1ac4daae6420f30a56fc7e800629d695748f59fb0d6ee5c86e604916b0de2
-
SHA512
c8a3c46d1c4a469b7778e03fc30cc722817bf6791b0e332c522f69d3f2ea5573059d99033b6d650aee4a165886501e4027c81b9024152112f4c286c61c82c950
-
SSDEEP
3072:JO+bY++73VQdqPg7WqD+NhGJZstCVH9xGSp+BPq19XAHtUcmzS:MWWzcJZs0d91WPquUcmG
Static task
static1
Behavioral task
behavioral1
Sample
d66ede99ee7b9bc03ef4d6dd791c3b80.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
d66ede99ee7b9bc03ef4d6dd791c3b80.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
d66ede99ee7b9bc03ef4d6dd791c3b80
-
Size
208KB
-
MD5
d66ede99ee7b9bc03ef4d6dd791c3b80
-
SHA1
7db1fbeca30e9d87d64ce3e47a9e3473a6787098
-
SHA256
cfe1ac4daae6420f30a56fc7e800629d695748f59fb0d6ee5c86e604916b0de2
-
SHA512
c8a3c46d1c4a469b7778e03fc30cc722817bf6791b0e332c522f69d3f2ea5573059d99033b6d650aee4a165886501e4027c81b9024152112f4c286c61c82c950
-
SSDEEP
3072:JO+bY++73VQdqPg7WqD+NhGJZstCVH9xGSp+BPq19XAHtUcmzS:MWWzcJZs0d91WPquUcmG
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-