General
- Target cmd-x.lua
- Size 1KB
- Sample240404-q73wvsac37
- SHA256 e3e0d94fa969c8b62acbf7ed62c19648dbedd02e90830f4fa0a0811366c8be85
- MD5 71f3144982eeed188d8c776a92bd819d
- SHA1 f3b1b1b7c8e923afc17bbcb10a86478d9c43b1a0
- SHA512 736bd75cf7d010c1b9b85c102a90d69bd76343966fc646f51222dcbdb714d8c958cfbd86b31664401ecb61e0f5f9a69666b0e338935df25de68d907bd6bcb66f
- MD5 SHA1 SHA512
Static task
static1
Malware Config
Targets
-
- Target cmd-x.lua
- Size 1KB
- SHA256 e3e0d94fa969c8b62acbf7ed62c19648dbedd02e90830f4fa0a0811366c8be85
- MD5 71f3144982eeed188d8c776a92bd819d
- SHA1 f3b1b1b7c8e923afc17bbcb10a86478d9c43b1a0
- SHA512 736bd75cf7d010c1b9b85c102a90d69bd76343966fc646f51222dcbdb714d8c958cfbd86b31664401ecb61e0f5f9a69666b0e338935df25de68d907bd6bcb66f
- MD5 SHA1 SHA512
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL