General
-
Target
dcordx64.exe
-
Size
202.5MB
-
Sample
240410-q3xt2shg84
-
MD5
2495dc6c5aef5d0c31e2907e956a244f
-
SHA1
7c75bea4c0448ec937df522facf866a2e4619f96
-
SHA256
1bd7e4389963e3abed253ee9314e4039470a77ba863e35883770046d307a8f03
-
SHA512
07d5ce56797e33eea4bc8cca29fe5cda8c847770ea4396928dcdf081a0d6ef93fc0889c2c82773128e456f7857ecef71a3868a7c274b1b309bacac50b135a56c
-
SSDEEP
6291456:n9ug4T7Y8OFAWOJv+ju37gv3gnVaJZoFAjPB0s1Ok3KMw6iX:994T7YZsJWjjyeIAj9Ok6M8
Static task
static1
Behavioral task
behavioral1
Sample
dcordx64.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
dcordx64.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
dcordx64.exe
-
Size
202.5MB
-
MD5
2495dc6c5aef5d0c31e2907e956a244f
-
SHA1
7c75bea4c0448ec937df522facf866a2e4619f96
-
SHA256
1bd7e4389963e3abed253ee9314e4039470a77ba863e35883770046d307a8f03
-
SHA512
07d5ce56797e33eea4bc8cca29fe5cda8c847770ea4396928dcdf081a0d6ef93fc0889c2c82773128e456f7857ecef71a3868a7c274b1b309bacac50b135a56c
-
SSDEEP
6291456:n9ug4T7Y8OFAWOJv+ju37gv3gnVaJZoFAjPB0s1Ok3KMw6iX:994T7YZsJWjjyeIAj9Ok6M8
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-