General
-
Target
Administrator-DELLXPS1456- 2024-04-03 13-52-24.html.exe
-
Size
67KB
-
Sample
240403-pm36fsda7z
-
MD5
ceb9e6829d00ad6e8f25b30d77aba83f
-
SHA1
865128c3a9baee65deeab14f1fdc9a68969df6f4
-
SHA256
664582c7357c0ea9f0f6ab524867e1cce887251b11e917ba5c9d81247e57bcb1
-
SHA512
18703d353319cbd049dfe3d19469eef2ef26615e44101eca43d1c7da515553d2c98e8098e5d2cfbf1c32984d77846dec320223ea4b8189ca9f64d570e7ea0ca2
-
SSDEEP
1536:j+wPW51r8EHsL71ELMt/RYKiq4vo/1oHHbwr/Ye2WcMX6F8:j+wIiEH+u4/O1HHbwse2SXE8
Static task
static1
Behavioral task
behavioral1
Sample
Administrator-DELLXPS1456- 2024-04-03 13-52-24.html.exe
Resource
win7-20231129-en
Malware Config
Targets
-
-
Target
Administrator-DELLXPS1456- 2024-04-03 13-52-24.html.exe
-
Size
67KB
-
MD5
ceb9e6829d00ad6e8f25b30d77aba83f
-
SHA1
865128c3a9baee65deeab14f1fdc9a68969df6f4
-
SHA256
664582c7357c0ea9f0f6ab524867e1cce887251b11e917ba5c9d81247e57bcb1
-
SHA512
18703d353319cbd049dfe3d19469eef2ef26615e44101eca43d1c7da515553d2c98e8098e5d2cfbf1c32984d77846dec320223ea4b8189ca9f64d570e7ea0ca2
-
SSDEEP
1536:j+wPW51r8EHsL71ELMt/RYKiq4vo/1oHHbwr/Ye2WcMX6F8:j+wIiEH+u4/O1HHbwse2SXE8
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops desktop.ini file(s)
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Looks up geolocation information via web service
Uses a legitimate geolocation service to find the infected system's geolocation info.
-