General
-
Target
d9928906da1b4c4c9be9591cdcc6667e
-
Size
298KB
-
Sample
240409-3ke8hadf4y
-
MD5
d9928906da1b4c4c9be9591cdcc6667e
-
SHA1
10334080d54808af5feec2933c7a608a1ef1292b
-
SHA256
24df359c9aeeee7eef5f38546f048ab7ad5a379ea8ef64b4cc45234fd5477c87
-
SHA512
309ebce2b92d8b948b818048254018cfa4fcb2a96621ccf618939c7436308a54789090f3b828fa55ca32a92f11f2685273d9db78032f4f0000e98537ede2d706
-
SSDEEP
1536:iwQBHSonUWjzlZLXf4QJpUT0mSBAgapetc8o/Kdgo1QGuG3gyh1nu:iBlSRWjzrLXQQJKgmSBAVpet2Ago1ls
Static task
static1
Behavioral task
behavioral1
Sample
d9928906da1b4c4c9be9591cdcc6667e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
d9928906da1b4c4c9be9591cdcc6667e.exe
Resource
win10v2004-20240226-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
d9928906da1b4c4c9be9591cdcc6667e
-
Size
298KB
-
MD5
d9928906da1b4c4c9be9591cdcc6667e
-
SHA1
10334080d54808af5feec2933c7a608a1ef1292b
-
SHA256
24df359c9aeeee7eef5f38546f048ab7ad5a379ea8ef64b4cc45234fd5477c87
-
SHA512
309ebce2b92d8b948b818048254018cfa4fcb2a96621ccf618939c7436308a54789090f3b828fa55ca32a92f11f2685273d9db78032f4f0000e98537ede2d706
-
SSDEEP
1536:iwQBHSonUWjzlZLXf4QJpUT0mSBAgapetc8o/Kdgo1QGuG3gyh1nu:iBlSRWjzrLXQQJKgmSBAVpet2Ago1ls
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-