General
-
Target
989ae5b3d5f518de0269ec326005f6fb.bin
-
Size
41KB
-
Sample
240225-def56sbc5z
-
MD5
989ae5b3d5f518de0269ec326005f6fb
-
SHA1
0c8caa1ad57d3bfae239d76aeccb51f4e364eed5
-
SHA256
0280fbde725a3ffe96a1f0cce44c82be4f757c66232b5b3293e1a680390d6960
-
SHA512
9928e3f61d1ad060f6bd2faefb899de0fc6305a06f1d2e651e0237110a76484f9e8dad838ee2b6bb9bcc9652452785bfbf92715361b4ba355f6da7ee6caa037a
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PADX:b/pYayGig5HjS3NPAL
Static task
static1
Behavioral task
behavioral1
Sample
989ae5b3d5f518de0269ec326005f6fb.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
989ae5b3d5f518de0269ec326005f6fb.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
989ae5b3d5f518de0269ec326005f6fb.bin
-
Size
41KB
-
MD5
989ae5b3d5f518de0269ec326005f6fb
-
SHA1
0c8caa1ad57d3bfae239d76aeccb51f4e364eed5
-
SHA256
0280fbde725a3ffe96a1f0cce44c82be4f757c66232b5b3293e1a680390d6960
-
SHA512
9928e3f61d1ad060f6bd2faefb899de0fc6305a06f1d2e651e0237110a76484f9e8dad838ee2b6bb9bcc9652452785bfbf92715361b4ba355f6da7ee6caa037a
-
SSDEEP
768:b/yC4GyNM01GuQMNXw2PSjHPbSuYlW8PADX:b/pYayGig5HjS3NPAL
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-