General
-
Target
c9441ec1ae32fb1540474084ed65caa1
-
Size
429KB
-
Sample
240314-wp3q2aba6s
-
MD5
c9441ec1ae32fb1540474084ed65caa1
-
SHA1
a3ac944b19a7a66144874a687de3f2bf76bd1942
-
SHA256
481b25f284855a274a92340e286a9e906ba508f64b0f3cf86f761d8eeaa74ecc
-
SHA512
ac714da45a8e07f142717c5d20ac2512449f93a85397487b06373f883802717c38b89974a03f1a2e9d64242d22b3ba9247039565a5f8d83b8fa4132b5dba3bfb
-
SSDEEP
6144:0Xt/0Do6OkTt9wP4FulH7qIt55cdo/b+RPYISRl+PYOiv72eI3XMiB739yoKLhKR:0Xt8DoyBIPEHyIalUUlIsiN39KUR
Static task
static1
Behavioral task
behavioral1
Sample
c9441ec1ae32fb1540474084ed65caa1.js
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c9441ec1ae32fb1540474084ed65caa1.js
Resource
win10v2004-20240226-en
Malware Config
Extracted
https://jolantagraban.pl/log/57843441668980/dll/assistant.php
Targets
-
-
Target
c9441ec1ae32fb1540474084ed65caa1
-
Size
429KB
-
MD5
c9441ec1ae32fb1540474084ed65caa1
-
SHA1
a3ac944b19a7a66144874a687de3f2bf76bd1942
-
SHA256
481b25f284855a274a92340e286a9e906ba508f64b0f3cf86f761d8eeaa74ecc
-
SHA512
ac714da45a8e07f142717c5d20ac2512449f93a85397487b06373f883802717c38b89974a03f1a2e9d64242d22b3ba9247039565a5f8d83b8fa4132b5dba3bfb
-
SSDEEP
6144:0Xt/0Do6OkTt9wP4FulH7qIt55cdo/b+RPYISRl+PYOiv72eI3XMiB739yoKLhKR:0Xt8DoyBIPEHyIalUUlIsiN39KUR
Score10/10-
Blocklisted process makes network request
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-