General
-
Target
1bf16cf940ac620b76f54235b70a9b67
-
Size
1.7MB
-
Sample
231230-zdpltagef2
-
MD5
1bf16cf940ac620b76f54235b70a9b67
-
SHA1
94f4d95ccd5e7bf9ab164b39951cd6ca9602a35b
-
SHA256
114d49aad1fa5782cae105aca32ec974c195c8a7fcf04af52bd0a9964b8b3d24
-
SHA512
fe57443da0df3d24eb42cf710a33e85231738091b4c72227777b0c2a748cd769eef05ad9857ab294e501b088597ae2be65d5c54cdc805f37099252f38c183778
-
SSDEEP
49152:dnLvs3wcn8A9Ytmr/E9UetUJV6xQOzuXi0JVnXHqcprJL9:dng3wcPkmr/EVU6xNzCTVacB
Static task
static1
Behavioral task
behavioral1
Sample
1bf16cf940ac620b76f54235b70a9b67.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
1bf16cf940ac620b76f54235b70a9b67
-
Size
1.7MB
-
MD5
1bf16cf940ac620b76f54235b70a9b67
-
SHA1
94f4d95ccd5e7bf9ab164b39951cd6ca9602a35b
-
SHA256
114d49aad1fa5782cae105aca32ec974c195c8a7fcf04af52bd0a9964b8b3d24
-
SHA512
fe57443da0df3d24eb42cf710a33e85231738091b4c72227777b0c2a748cd769eef05ad9857ab294e501b088597ae2be65d5c54cdc805f37099252f38c183778
-
SSDEEP
49152:dnLvs3wcn8A9Ytmr/E9UetUJV6xQOzuXi0JVnXHqcprJL9:dng3wcPkmr/EVU6xNzCTVacB
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-