General
-
Target
f9846d5963dbf3552e86fb429e8e0dc9b68c60c314c2080464b8a765dc93bffc
-
Size
132KB
-
Sample
240330-1vj84afe3t
-
MD5
1c434fa39f6b740903cc38d70265e0d2
-
SHA1
caa51b5e078df5ae4fbc45379fc3a97c8d337a41
-
SHA256
f9846d5963dbf3552e86fb429e8e0dc9b68c60c314c2080464b8a765dc93bffc
-
SHA512
c5c2a402c46d740b96a40358ded8ac505907e393f69c21736c0a67b02a36e14737e598a4cb067ad440832a6d20ec59f5e0bdcab71191cc93775d867437775fee
-
SSDEEP
3072:MftffhJCuEmUcCSjGoLpIZ8plqS0b2obE4dea7zeWdkm1SXcmEd:UVfhgujHXIZ3aWdn7ze+km1SXcmG
Static task
static1
Behavioral task
behavioral1
Sample
f9846d5963dbf3552e86fb429e8e0dc9b68c60c314c2080464b8a765dc93bffc.exe
Resource
win7-20240221-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
f9846d5963dbf3552e86fb429e8e0dc9b68c60c314c2080464b8a765dc93bffc
-
Size
132KB
-
MD5
1c434fa39f6b740903cc38d70265e0d2
-
SHA1
caa51b5e078df5ae4fbc45379fc3a97c8d337a41
-
SHA256
f9846d5963dbf3552e86fb429e8e0dc9b68c60c314c2080464b8a765dc93bffc
-
SHA512
c5c2a402c46d740b96a40358ded8ac505907e393f69c21736c0a67b02a36e14737e598a4cb067ad440832a6d20ec59f5e0bdcab71191cc93775d867437775fee
-
SSDEEP
3072:MftffhJCuEmUcCSjGoLpIZ8plqS0b2obE4dea7zeWdkm1SXcmEd:UVfhgujHXIZ3aWdn7ze+km1SXcmG
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-