General
- Target 7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e.exe
- Size 1.2MB
- Sample240208-p8nb5afc23
- SHA256 7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e
- MD5 5461f51412ba389355735f619f5fc0d5
- SHA1 ad547430fc35d31a3e1878a3fb6618fe9aa8b115
- SHA512 e051d5d14db9118119a475f69100504430d6d6374b0f01dcf8d1bac8743c6c823fedf4d875e5f90810ba28a27b150b669294de6d1f102b737780627037083e6e
- SSDEEP 24576:mTbBv5rUSvFMOCiRNouSY4GVTePBGa6mXcqIAXiAZfzI6i:YBVNMO155RLAXiAZ0
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e.exe
Resource
win7-20231129-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e.exe
Resource
win10v2004-20231222-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e.exe
- Size 1.2MB
- SHA256 7f5afd30f7eb7858f4d31dc758fdf58927e9547446a50125216b0486f2295e2e
- MD5 5461f51412ba389355735f619f5fc0d5
- SHA1 ad547430fc35d31a3e1878a3fb6618fe9aa8b115
- SHA512 e051d5d14db9118119a475f69100504430d6d6374b0f01dcf8d1bac8743c6c823fedf4d875e5f90810ba28a27b150b669294de6d1f102b737780627037083e6e
- SSDEEP 24576:mTbBv5rUSvFMOCiRNouSY4GVTePBGa6mXcqIAXiAZfzI6i:YBVNMO155RLAXiAZ0
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Suspicious use of SetThreadContext