General
- Target 16523976580.zip
- Size 96KB
- Sample240405-m38d1aaa9w
- SHA256 1619d1ebff7dbbd6ca16ffea7885820c11b1c389c48bfefd2ba1b67d0049b154
- MD5 9d4365959ff3fe2b41b8a19b64a1bc78
- SHA1 8a45b7e25eeef7a3de4154a2ab52a5920026c8b9
- SHA512 47d9333f4d1070a01cff09d761daf8870486f1be0a1a42fb5959062978c7a9b7c6b66bc5a887c9eae3708ac159e43b7acf1daf5704aa57e1c8e33cda0ec6381f
- SSDEEP 3072:/2Hp5fiaMpkB2u5WiMVr+g1pcKSJwVW1eS:/2TAkAity1XceS
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46.exe
Resource
win7-20240221-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46.exe
Resource
win10v2004-20240226-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46
- Size 145KB
- SHA256 2e83048c7ed1193f09ae8d293b42c105662828f2ab56a2fa1f81379ee250fc46
- MD5 4e39dcfb9913e475f04927e71f38733a
- SHA1 5618cdd20144cf44ac0719bf917aac2ff882e41c
- SHA512 678581a15c404351c98bacb0b2aa432023e9335536fefda4fe6613d2ba7daada5fa7fbc52b37c9b1c4421c7b66be44f1a5162d45478671018f8120ebbfa483e0
- SSDEEP 3072:p6glyuxE4GsUPnliByocWepO+cDevjAEyYFEf:p6gDBGpvEByocWe0+oeENY
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops desktop.ini file(s)
-
Suspicious use of NtSetInformationThreadHideFromDebugger