General
-
Target
37e716750fc354e799688e3dd440b945
-
Size
2.1MB
-
Sample
231225-x58gwscga7
-
MD5
37e716750fc354e799688e3dd440b945
-
SHA1
7b5f8e507864412e6daf1e828be1a819e23ccc3d
-
SHA256
b7e60290efe74a3a1dbec38e2f3ae3242dac829732124164f12240a70232ecf0
-
SHA512
6d4cac31eb147147b4882c0a6d20b7cb620b24e03945976081efc08ecb9569e9487405f35bd97d01ba6e8d51a60f3ad8af11df39b5fedc5825af530fdca8b505
-
SSDEEP
49152:pEXqzrcU4GHLabFUcRUjhDFYJYzuAv0ujrUL:G6/cU8bsjhZyYaAPjQL
Static task
static1
Behavioral task
behavioral1
Sample
37e716750fc354e799688e3dd440b945.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
37e716750fc354e799688e3dd440b945.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
37e716750fc354e799688e3dd440b945
-
Size
2.1MB
-
MD5
37e716750fc354e799688e3dd440b945
-
SHA1
7b5f8e507864412e6daf1e828be1a819e23ccc3d
-
SHA256
b7e60290efe74a3a1dbec38e2f3ae3242dac829732124164f12240a70232ecf0
-
SHA512
6d4cac31eb147147b4882c0a6d20b7cb620b24e03945976081efc08ecb9569e9487405f35bd97d01ba6e8d51a60f3ad8af11df39b5fedc5825af530fdca8b505
-
SSDEEP
49152:pEXqzrcU4GHLabFUcRUjhDFYJYzuAv0ujrUL:G6/cU8bsjhZyYaAPjQL
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-