General
-
Target
654033f2bba6466f2c4ff116e90d6cb2
-
Size
22KB
-
Sample
231226-lw5h4abcem
-
MD5
654033f2bba6466f2c4ff116e90d6cb2
-
SHA1
af837c2fe53935d76e0259993be68d8c8c53c825
-
SHA256
cabadfad599dc4ab1bee2d264858584858a4a6b082bea08f173487bcf5707571
-
SHA512
44464531a2d002006a72ab343987b848abe307e7ab948632243f963607cb36d198fd989ee168539b7b77f218af1f7421205be6d68377b6a0201c6f2549db520b
-
SSDEEP
384:Lfra102La/cJvulqH+ihqxWnJJk9tP47t8eKjP+3piVlxaHF7DW:LfWfa/cAshqxWJi9tw7t8eKS3MxwF
Behavioral task
behavioral1
Sample
654033f2bba6466f2c4ff116e90d6cb2.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
654033f2bba6466f2c4ff116e90d6cb2.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
654033f2bba6466f2c4ff116e90d6cb2
-
Size
22KB
-
MD5
654033f2bba6466f2c4ff116e90d6cb2
-
SHA1
af837c2fe53935d76e0259993be68d8c8c53c825
-
SHA256
cabadfad599dc4ab1bee2d264858584858a4a6b082bea08f173487bcf5707571
-
SHA512
44464531a2d002006a72ab343987b848abe307e7ab948632243f963607cb36d198fd989ee168539b7b77f218af1f7421205be6d68377b6a0201c6f2549db520b
-
SSDEEP
384:Lfra102La/cJvulqH+ihqxWnJJk9tP47t8eKjP+3piVlxaHF7DW:LfWfa/cAshqxWJi9tw7t8eKS3MxwF
Score8/10-
Adds policy Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-