Analysis
-
max time kernel
161s -
max time network
176s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
08/01/2024, 20:21
Static task
static1
Behavioral task
behavioral1
Sample
4c5f26c1e2bcac55a9c56ae469c25bda.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4c5f26c1e2bcac55a9c56ae469c25bda.exe
Resource
win10v2004-20231215-en
General
-
Target
4c5f26c1e2bcac55a9c56ae469c25bda.exe
-
Size
45KB
-
MD5
4c5f26c1e2bcac55a9c56ae469c25bda
-
SHA1
74878026e8a4a4d3e927f6cef8a85c2abbce8b43
-
SHA256
0d73812336c7fbd31e8396ae34746a08a14f8896817348be56cc73702f8c7967
-
SHA512
bcb48dac5a69dc129ba88a7ae393f65292ac329bed9b86ad4d565b0d471b7f3fd4cbd00e357b3036cd8c5ddb365828f1904a3dbac1125ae8308d8048a3abd69e
-
SSDEEP
768:fZs1lJznAtwIkCo0PIttkGxWQVuO6FNF4fqkcrpkh:a1vznqkCo0PItS7QeFNFv2
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-3073191680-435865314-2862784915-1000\Control Panel\International\Geo\Nation 4c5f26c1e2bcac55a9c56ae469c25bda.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).