Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
18-03-2024 12:30
Static task
static1
Behavioral task
behavioral1
Sample
d383df5d2f848593022f1c915c529de2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d383df5d2f848593022f1c915c529de2.exe
Resource
win10v2004-20240226-en
General
-
Target
d383df5d2f848593022f1c915c529de2.exe
-
Size
45KB
-
MD5
d383df5d2f848593022f1c915c529de2
-
SHA1
92b621da84e60566e21733b847fab99bf71e17b3
-
SHA256
c402bccdaab0d040e23ea0c7ae4d1fe3ca0cbfd81f01f8c4272a3e694c7907cf
-
SHA512
8a440686dae9b7e8400f8264abc4376f4843161bbd52c8e90ccaf5e34a46e9f863caa41d33f0b0c3ad534a3bfc70b5c5382df488473941787845da74877a8a88
-
SSDEEP
768:B8MzzRxW+4N6YcSE4Wk7iiOGu0Aj++WVnZYhyuxqkcrj:HzdxZ4R/Fh5u0q6XW0
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
description ioc Process Key value queried \REGISTRY\USER\S-1-5-21-275798769-4264537674-1142822080-1000\Control Panel\International\Geo\Nation d383df5d2f848593022f1c915c529de2.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).