General
-
Target
cmd-x.lua
-
Size
1KB
-
Sample
240404-q73wvsac37
-
MD5
71f3144982eeed188d8c776a92bd819d
-
SHA1
f3b1b1b7c8e923afc17bbcb10a86478d9c43b1a0
-
SHA256
e3e0d94fa969c8b62acbf7ed62c19648dbedd02e90830f4fa0a0811366c8be85
-
SHA512
736bd75cf7d010c1b9b85c102a90d69bd76343966fc646f51222dcbdb714d8c958cfbd86b31664401ecb61e0f5f9a69666b0e338935df25de68d907bd6bcb66f
Static task
static1
Malware Config
Targets
-
-
Target
cmd-x.lua
-
Size
1KB
-
MD5
71f3144982eeed188d8c776a92bd819d
-
SHA1
f3b1b1b7c8e923afc17bbcb10a86478d9c43b1a0
-
SHA256
e3e0d94fa969c8b62acbf7ed62c19648dbedd02e90830f4fa0a0811366c8be85
-
SHA512
736bd75cf7d010c1b9b85c102a90d69bd76343966fc646f51222dcbdb714d8c958cfbd86b31664401ecb61e0f5f9a69666b0e338935df25de68d907bd6bcb66f
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-