Analysis
-
max time kernel
168s -
max time network
176s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29-12-2023 18:17
Static task
static1
Behavioral task
behavioral1
Sample
003ac7f46c7557ba7eeb6762323eabd1.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
003ac7f46c7557ba7eeb6762323eabd1.exe
Resource
win10v2004-20231215-en
General
-
Target
003ac7f46c7557ba7eeb6762323eabd1.exe
-
Size
72KB
-
MD5
003ac7f46c7557ba7eeb6762323eabd1
-
SHA1
dab83ce7be77d932f5cbb5ea0b2d284e217fe8a1
-
SHA256
3477f82b172f00621a9b7973e21d536e06bc826feb3c27443660e601e2ab6e98
-
SHA512
4f8790b033da6ec56a27e0cebbf44a490ff3bdb86f357057e120be4668e5f32f24193295e42d1bc774584972f85b22c53707dd7d0f89e0cbd9ddab24fd359a4c
-
SSDEEP
768:qSZLA5EUauXJujBDm8fNInbHHo/qrV9kXarSyE:q/LauZuFDLInVW
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-1268429524-3929314613-1992311491-1000\Control Panel\International\Geo\Nation 003ac7f46c7557ba7eeb6762323eabd1.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of UnmapMainImage 1 IoCs
pid Process 2408 003ac7f46c7557ba7eeb6762323eabd1.exe