General
-
Target
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047
-
Size
1.7MB
-
Sample
240407-xye7rscd43
-
MD5
2e6b924bdcbf98bc85b9cd4ee93d294e
-
SHA1
093f7016f9884b7dae023600d641d0acbb206a29
-
SHA256
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047
-
SHA512
7979ccf8003c782f9be781eb35d97eed224c9a25228cfc69bb2266325e1427ee8e9be05647fb7b3f35d6a816bddae83c98136d8ab5caf03dc990f07efa43b192
-
SSDEEP
49152:xssy6QVHiHKtRz/TJRdZm1n6ToSSgXHpa0MBifmV:xsssKszrJ0HOJWBiM
Behavioral task
behavioral1
Sample
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047
-
Size
1.7MB
-
MD5
2e6b924bdcbf98bc85b9cd4ee93d294e
-
SHA1
093f7016f9884b7dae023600d641d0acbb206a29
-
SHA256
204cad4ec0178656417f8cf7ea037ca6dde366253a4c5464cdf0782e38cd2047
-
SHA512
7979ccf8003c782f9be781eb35d97eed224c9a25228cfc69bb2266325e1427ee8e9be05647fb7b3f35d6a816bddae83c98136d8ab5caf03dc990f07efa43b192
-
SSDEEP
49152:xssy6QVHiHKtRz/TJRdZm1n6ToSSgXHpa0MBifmV:xsssKszrJ0HOJWBiM
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-