General
-
Target
CPD12.exe
-
Size
3.9MB
-
Sample
240307-vr15jsgd87
-
MD5
f4282c454b51b4fcc349d055c3e71879
-
SHA1
52b68b68a2dabc0e6a7643c323d0e7593c426ef3
-
SHA256
4617411ea3d11a5a9874bd69c186b3200c3286ce47e2bbb283eaee9f906878e0
-
SHA512
b930456259c843a1832b2a30a5977a768787da3f1ad6829e4a2a87d1c15b4a2b1e3928248e3d82e26e81a2d0bd6ae7261edc619c2abdf2c8148a2164bc7f8a98
-
SSDEEP
98304:emY+C/pZaz/FOXnkWYfLj18kH5PS5Lo8YNjJlkW2PL:emY+2pMyk1GaPS5MjjkW2PL
Static task
static1
Behavioral task
behavioral1
Sample
CPD12.exe
Resource
win10-20240221-es
Malware Config
Targets
-
-
Target
CPD12.exe
-
Size
3.9MB
-
MD5
f4282c454b51b4fcc349d055c3e71879
-
SHA1
52b68b68a2dabc0e6a7643c323d0e7593c426ef3
-
SHA256
4617411ea3d11a5a9874bd69c186b3200c3286ce47e2bbb283eaee9f906878e0
-
SHA512
b930456259c843a1832b2a30a5977a768787da3f1ad6829e4a2a87d1c15b4a2b1e3928248e3d82e26e81a2d0bd6ae7261edc619c2abdf2c8148a2164bc7f8a98
-
SSDEEP
98304:emY+C/pZaz/FOXnkWYfLj18kH5PS5Lo8YNjJlkW2PL:emY+2pMyk1GaPS5MjjkW2PL
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-