Analysis
-
max time kernel
143s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
30/12/2023, 23:55
Static task
static1
Behavioral task
behavioral1
Sample
20bd9420fe02dc6fbba2c71e20ef3a9e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
20bd9420fe02dc6fbba2c71e20ef3a9e.exe
Resource
win10v2004-20231215-en
General
-
Target
20bd9420fe02dc6fbba2c71e20ef3a9e.exe
-
Size
55KB
-
MD5
20bd9420fe02dc6fbba2c71e20ef3a9e
-
SHA1
f6588b7e09548f0b66182676d881d18521cc6a25
-
SHA256
201ee4cb7d52c24d485d970c3b086331bfe259878fa9ea2c9803c110569194cb
-
SHA512
996e31ed5cfcc5347800fb7ff3052f96760393704aade383c91599c1dcf6a664c21b76d433bd0f4bd547f7dff65b36aade15f4f649993ce483aa30c7f36dc0d5
-
SSDEEP
768:Ue8CpI8xy3O4vBXoQkh2u0YaSKFFcT0wST0x/UnS5:UCI8cdZXiiDSY2Tbs0xMnS5
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-768304381-2824894965-3840216961-1000\Control Panel\International\Geo\Nation 20bd9420fe02dc6fbba2c71e20ef3a9e.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).