General
-
Target
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870
-
Size
271KB
-
Sample
240406-fcrj8sah6t
-
MD5
18c6e67819483de0015ef773bec3bcef
-
SHA1
673d2068846c20d64f2facf7117284142d74e592
-
SHA256
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870
-
SHA512
04f2d4fb336082883d7c6dfc953662a0bc18c2bb4cfb609364afb54294f7def468f39ff471ff4de27bf032c146ae088ed449fbb0b57690e16d350ec0705faa11
-
SSDEEP
6144:bPDLCL4Io5R4nM/4HnYE+I6IUMz1J7OdBm5f7oGpsDkkYGrsl:bPKL8qfY9u1JSGmDDYGrm
Behavioral task
behavioral1
Sample
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870
-
Size
271KB
-
MD5
18c6e67819483de0015ef773bec3bcef
-
SHA1
673d2068846c20d64f2facf7117284142d74e592
-
SHA256
f659d49fb4d8bf3a2cd371b7d3a28f511c39c36da3205a58a4a06aa741b55870
-
SHA512
04f2d4fb336082883d7c6dfc953662a0bc18c2bb4cfb609364afb54294f7def468f39ff471ff4de27bf032c146ae088ed449fbb0b57690e16d350ec0705faa11
-
SSDEEP
6144:bPDLCL4Io5R4nM/4HnYE+I6IUMz1J7OdBm5f7oGpsDkkYGrsl:bPKL8qfY9u1JSGmDDYGrm
Score9/10-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-