General
-
Target
2024-02-26_4e39dcfb9913e475f04927e71f38733a_darkside
-
Size
145KB
-
Sample
240226-mnkz6abd59
-
MD5
4e39dcfb9913e475f04927e71f38733a
-
SHA1
5618cdd20144cf44ac0719bf917aac2ff882e41c
-
SHA256
2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46
-
SHA512
678581a15c404351c98bacb0b2aa432023e9335536fefda4fe6613d2ba7daada5fa7fbc52b37c9b1c4421c7b66be44f1a5162d45478671018f8120ebbfa483e0
-
SSDEEP
3072:p6glyuxE4GsUPnliByocWepO+cDevjAEyYFEf:p6gDBGpvEByocWe0+oeENY
Behavioral task
behavioral1
Sample
2024-02-26_4e39dcfb9913e475f04927e71f38733a_darkside.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-02-26_4e39dcfb9913e475f04927e71f38733a_darkside.exe
Resource
win10v2004-20240221-en
Malware Config
Targets
-
-
Target
2024-02-26_4e39dcfb9913e475f04927e71f38733a_darkside
-
Size
145KB
-
MD5
4e39dcfb9913e475f04927e71f38733a
-
SHA1
5618cdd20144cf44ac0719bf917aac2ff882e41c
-
SHA256
2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46
-
SHA512
678581a15c404351c98bacb0b2aa432023e9335536fefda4fe6613d2ba7daada5fa7fbc52b37c9b1c4421c7b66be44f1a5162d45478671018f8120ebbfa483e0
-
SSDEEP
3072:p6glyuxE4GsUPnliByocWepO+cDevjAEyYFEf:p6gDBGpvEByocWe0+oeENY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-