General
-
Target
4064a7844ba605777f3f4ec872b94d0cee74ba9abe344014d88788b036920f29
-
Size
7.5MB
-
Sample
240403-l18fjsbh2v
-
MD5
320bdecbb8322d544b183bffab3a4427
-
SHA1
186d847865916024e113dddf6c3864b77fb47e33
-
SHA256
4064a7844ba605777f3f4ec872b94d0cee74ba9abe344014d88788b036920f29
-
SHA512
e214b3c62d2a8224e4ef399390135cf24081c1f839d7f6bfbc4cce8eeffe1ed72d1cea2d4c51b2c361261cee0a415352ec562f0471ad091c7695ff39867f2854
-
SSDEEP
196608:91OfEwsDBRhhLddvJU94MxjkcFPvgH/7Qpog45jBTjiQ:3OfcThrdvu3xVgHzQpyNF
Static task
static1
Behavioral task
behavioral1
Sample
4064a7844ba605777f3f4ec872b94d0cee74ba9abe344014d88788b036920f29.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
4064a7844ba605777f3f4ec872b94d0cee74ba9abe344014d88788b036920f29
-
Size
7.5MB
-
MD5
320bdecbb8322d544b183bffab3a4427
-
SHA1
186d847865916024e113dddf6c3864b77fb47e33
-
SHA256
4064a7844ba605777f3f4ec872b94d0cee74ba9abe344014d88788b036920f29
-
SHA512
e214b3c62d2a8224e4ef399390135cf24081c1f839d7f6bfbc4cce8eeffe1ed72d1cea2d4c51b2c361261cee0a415352ec562f0471ad091c7695ff39867f2854
-
SSDEEP
196608:91OfEwsDBRhhLddvJU94MxjkcFPvgH/7Qpog45jBTjiQ:3OfcThrdvu3xVgHzQpyNF
-
Blocklisted process makes network request
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-