General
-
Target
IMG_20240131_120707.jpg
-
Size
141KB
-
Sample
240213-yv9gwagg7z
-
MD5
26763071caffd24ee6b4fe0c190934ff
-
SHA1
d82dc97458a41994c6258fcd6814e99548b9aa7e
-
SHA256
6528240804ba7ed158b7559a71067b46b68d5485414b3191a391b8dcdf7a35a4
-
SHA512
9a87b9d898c25b34413f5e2c6f075663be5f0bd4197e3675b1d52d6553f015c935142282bafb00061f2a574cb57337e2de86d1199fbaf658a1986ff0d5d8f974
-
SSDEEP
3072:/IH06NZbtTMAAtzflUsZGR8Qf9VRjq67i52j7LwVWWLTY:0ZbtTMBtfB8R8QvRjhhcVhY
Static task
static1
Behavioral task
behavioral1
Sample
IMG_20240131_120707.jpg
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
IMG_20240131_120707.jpg
-
Size
141KB
-
MD5
26763071caffd24ee6b4fe0c190934ff
-
SHA1
d82dc97458a41994c6258fcd6814e99548b9aa7e
-
SHA256
6528240804ba7ed158b7559a71067b46b68d5485414b3191a391b8dcdf7a35a4
-
SHA512
9a87b9d898c25b34413f5e2c6f075663be5f0bd4197e3675b1d52d6553f015c935142282bafb00061f2a574cb57337e2de86d1199fbaf658a1986ff0d5d8f974
-
SSDEEP
3072:/IH06NZbtTMAAtzflUsZGR8Qf9VRjq67i52j7LwVWWLTY:0ZbtTMBtfB8R8QvRjhhcVhY
-
Downloads MZ/PE file
-
Modifies Installed Components in the registry
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-
Drops file in System32 directory
-