General
-
Target
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078
-
Size
435KB
-
Sample
240406-fcynjsah6y
-
MD5
7108815a17bf2efb703a347e07c05a04
-
SHA1
9b016571dfdbb84e268286982c6fb222bf79c4a2
-
SHA256
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078
-
SHA512
7924bf59e774ff2adcd810321159ea3574b770dc84be48e70aba466b1cd010bcb1e47b5370ed8f123a6ff90d67482af0f51fddf887a372a1dadded52035390f2
-
SSDEEP
6144:0jluQoSuIo5RFzDu/OPyvHNuopwVfxRMLGsT3ohnkJuxbludi1YK8oS8JGHz3Qgo:0EQoSCJziJAop6RMSsJ0YKrSDT3nTTDC
Behavioral task
behavioral1
Sample
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078
-
Size
435KB
-
MD5
7108815a17bf2efb703a347e07c05a04
-
SHA1
9b016571dfdbb84e268286982c6fb222bf79c4a2
-
SHA256
f67337678b722ce0cb251c1d0cb7283e1185eb5b427242e8fbdce186816d9078
-
SHA512
7924bf59e774ff2adcd810321159ea3574b770dc84be48e70aba466b1cd010bcb1e47b5370ed8f123a6ff90d67482af0f51fddf887a372a1dadded52035390f2
-
SSDEEP
6144:0jluQoSuIo5RFzDu/OPyvHNuopwVfxRMLGsT3ohnkJuxbludi1YK8oS8JGHz3Qgo:0EQoSCJziJAop6RMSsJ0YKrSDT3nTTDC
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-