General
- Target e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102
- Size 144KB
- Sample240328-back3scc3y
- SHA256 e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102
- MD5 1e7164d137353b117469423543b51dfa
- SHA1 7d965f1a201c24a13985e664fa6574d7d680d881
- SHA512 62a8c26ec42098ab5693f29d8a13990aa536fff496c1b7b2f3ae5a4e487b754a633057b12c6b730764463a9e97785c29e555de4a26e2cbabad32b968e7be1682
- SSDEEP 1536:1i+N6u0utYGsoK2mEGIBp+WWN7YfEj77iZ76vVGU2AjK15t5uPpdrcIPWAWvnTX3:wYYutRQSc/7c6tJK7t5uPpdrxOhvnTn
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102.exe
Resource
win10v2004-20231215-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102
- Size 144KB
- SHA256 e9f8ff497701a85312356d71b164d4ece5476ef7afdf974a4466f623940e4102
- MD5 1e7164d137353b117469423543b51dfa
- SHA1 7d965f1a201c24a13985e664fa6574d7d680d881
- SHA512 62a8c26ec42098ab5693f29d8a13990aa536fff496c1b7b2f3ae5a4e487b754a633057b12c6b730764463a9e97785c29e555de4a26e2cbabad32b968e7be1682
- SSDEEP 1536:1i+N6u0utYGsoK2mEGIBp+WWN7YfEj77iZ76vVGU2AjK15t5uPpdrcIPWAWvnTX3:wYYutRQSc/7c6tJK7t5uPpdrxOhvnTn
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL