General
-
Target
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670
-
Size
195KB
-
Sample
240405-2pb6zaed4v
-
MD5
5b47099d8b3c32c505d8c7ebe4eeef1e
-
SHA1
a80cf532515af21f91eea288e396283463f7bf2a
-
SHA256
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670
-
SHA512
ce66c2ce83f10bacb6d44210f952bb0c74ead0b829eed28042a1e0c5e6ff24b443111dc1fe33b19ec0fe6846c27c6a2624de4532842445b559029a7812c375b3
-
SSDEEP
1536:HfVLuTnlTTy9uEGe9t2oKLjWlCu8i9pUJANjiSqoWfQneMe:HfVLWlTTbEGe9AJKlCvIUkqoWInM
Static task
static1
Behavioral task
behavioral1
Sample
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670.exe
Resource
win10v2004-20231215-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670
-
Size
195KB
-
MD5
5b47099d8b3c32c505d8c7ebe4eeef1e
-
SHA1
a80cf532515af21f91eea288e396283463f7bf2a
-
SHA256
702aef58db326b3dca6dd005367887499c85ef6956d5449ea4624f411bd22670
-
SHA512
ce66c2ce83f10bacb6d44210f952bb0c74ead0b829eed28042a1e0c5e6ff24b443111dc1fe33b19ec0fe6846c27c6a2624de4532842445b559029a7812c375b3
-
SSDEEP
1536:HfVLuTnlTTy9uEGe9t2oKLjWlCu8i9pUJANjiSqoWfQneMe:HfVLWlTTbEGe9AJKlCvIUkqoWInM
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-