General
-
Target
f70eb3880f4a85d4bcaa0c88e42888d6
-
Size
3.4MB
-
Sample
231228-zktjcagdh2
-
MD5
f70eb3880f4a85d4bcaa0c88e42888d6
-
SHA1
049b0c6436718603e60a9faa1cd2d74087448dde
-
SHA256
6ad4cc84eae2dd853e7043e260a7f2e6e50f217a4c79e7caa010152f78552864
-
SHA512
b402309f30f843cd7f1c4841d56ec747c1e600983f57da18547e66a0d91f6bd40074b6837618fb71841ea244304fd875371f051122d46176d4ffa68b27e42feb
-
SSDEEP
98304:NEb9Vmsnb34B7SBayHN8rX/cBHjPh3msIGS4:qBbO7SBayH+TiPhWs7S4
Static task
static1
Behavioral task
behavioral1
Sample
f70eb3880f4a85d4bcaa0c88e42888d6.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f70eb3880f4a85d4bcaa0c88e42888d6.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
f70eb3880f4a85d4bcaa0c88e42888d6
-
Size
3.4MB
-
MD5
f70eb3880f4a85d4bcaa0c88e42888d6
-
SHA1
049b0c6436718603e60a9faa1cd2d74087448dde
-
SHA256
6ad4cc84eae2dd853e7043e260a7f2e6e50f217a4c79e7caa010152f78552864
-
SHA512
b402309f30f843cd7f1c4841d56ec747c1e600983f57da18547e66a0d91f6bd40074b6837618fb71841ea244304fd875371f051122d46176d4ffa68b27e42feb
-
SSDEEP
98304:NEb9Vmsnb34B7SBayHN8rX/cBHjPh3msIGS4:qBbO7SBayH+TiPhWs7S4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-