General
-
Target
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6
-
Size
86KB
-
Sample
240408-b1daasda32
-
MD5
93302103fd787cc3315b1d43dea92d19
-
SHA1
d33120e54eb38958ed3ff69d69332ad77af13d37
-
SHA256
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6
-
SHA512
a11ff3f4752afca674d34bc705cf98b6e4ceec2474db71c6536fbd7fc6104e0da4db60e4572dec5994ac56ca2143dba9ecbb1c517640569dd553576303645b0c
-
SSDEEP
1536:t1RVCaKgzbLc54hukfgvYnouy8sV1Ayj4m/QWR/RVmv:t/jbLl/gvQoutA1Tj4mYWR/Rgv
Behavioral task
behavioral1
Sample
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6
-
Size
86KB
-
MD5
93302103fd787cc3315b1d43dea92d19
-
SHA1
d33120e54eb38958ed3ff69d69332ad77af13d37
-
SHA256
ceeb121d2905def31b77eaaf8bd45bda3b76870bb7b88317ec0f7c6269fb94b6
-
SHA512
a11ff3f4752afca674d34bc705cf98b6e4ceec2474db71c6536fbd7fc6104e0da4db60e4572dec5994ac56ca2143dba9ecbb1c517640569dd553576303645b0c
-
SSDEEP
1536:t1RVCaKgzbLc54hukfgvYnouy8sV1Ayj4m/QWR/RVmv:t/jbLl/gvQoutA1Tj4mYWR/Rgv
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-