General
- Target MediaCreationTool22H2.exe
- Size 18.6MB
- Sample240202-r1e2wsafcm
- SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
- MD5 aa2ad37bb74c05a49417e3d2f1bd89ce
- SHA1 1bf5f814ffe801b4e6f118e829c0d2821d78a60a
- SHA512 fab34ccbefbcdcec8f823840c16ae564812d0e063319c4eb4cc1112cf775b8764fea59d0bbafd4774d84b56e08c24056fa96f27425c4060e12eb547c2ae086cc
- SSDEEP 196608:MmtHa+5hH1km/Sf7byFXKEBmih9S5rQ5FNFl001p4Ki:Y+5RB/SDbyFBH9eQD/l00/4
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
MediaCreationTool22H2.exe
Resource
win7-20231215-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
MediaCreationTool22H2.exe
Resource
win10v2004-20231215-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MediaCreationTool22H2.exe
- Size 18.6MB
- SHA256 690c8a63769d444fad47b7ddecee7f24c9333aa735d0bd46587d0df5cf15cde5
- MD5 aa2ad37bb74c05a49417e3d2f1bd89ce
- SHA1 1bf5f814ffe801b4e6f118e829c0d2821d78a60a
- SHA512 fab34ccbefbcdcec8f823840c16ae564812d0e063319c4eb4cc1112cf775b8764fea59d0bbafd4774d84b56e08c24056fa96f27425c4060e12eb547c2ae086cc
- SSDEEP 196608:MmtHa+5hH1km/Sf7byFXKEBmih9S5rQ5FNFl001p4Ki:Y+5RB/SDbyFBH9eQD/l00/4
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.