General
-
Target
71b2f3c40cf873641f39dde41d160c6a
-
Size
608KB
-
Sample
240124-jwnjgadean
-
MD5
71b2f3c40cf873641f39dde41d160c6a
-
SHA1
ca0aa9c6e5be1fba93ca3a5da3ed01584f3c9495
-
SHA256
046a1ab07d00310dfdbb8390f614bf3cd90aad379c5c713fc62889ea72792335
-
SHA512
1ed5e3b99974e434494d952e65df913dd6dfd599fd08161a024489e8efed78c04facaa91473124b8179f6db97c58186e0b962840f2ba511bf74f9083994fa87e
-
SSDEEP
12288:72KXHc77k5zsOn91Sbj+1+rG1Bhdk6b4LsXbqFVZguy1ukVLoGERBo2:72KXeCz7I+1GMdkVTcv1VVKt
Static task
static1
Behavioral task
behavioral1
Sample
71b2f3c40cf873641f39dde41d160c6a.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
71b2f3c40cf873641f39dde41d160c6a.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
71b2f3c40cf873641f39dde41d160c6a
-
Size
608KB
-
MD5
71b2f3c40cf873641f39dde41d160c6a
-
SHA1
ca0aa9c6e5be1fba93ca3a5da3ed01584f3c9495
-
SHA256
046a1ab07d00310dfdbb8390f614bf3cd90aad379c5c713fc62889ea72792335
-
SHA512
1ed5e3b99974e434494d952e65df913dd6dfd599fd08161a024489e8efed78c04facaa91473124b8179f6db97c58186e0b962840f2ba511bf74f9083994fa87e
-
SSDEEP
12288:72KXHc77k5zsOn91Sbj+1+rG1Bhdk6b4LsXbqFVZguy1ukVLoGERBo2:72KXeCz7I+1GMdkVTcv1VVKt
Score8/10-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-