General
-
Target
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5
-
Size
1.9MB
-
Sample
240419-3aav2aba4y
-
MD5
4ea919e75eae053c69169dfd3223363b
-
SHA1
4d09579dbef77095cc0be6ba292e8d91c5ba2080
-
SHA256
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5
-
SHA512
8feea53210ead0d2987b69a1ada66a4faa9295e4fedfa452816ba560118d174dc845d65cdb3b0d30d69cde10cd748b15de6f18629d41eadf606a97b3237073e5
-
SSDEEP
24576:0bxLet15Vf+H7dwofhLjoBj+I5iG8ztZtZ3TtN9GHHOex3Q8xqB8JHmL21Xhj5IV:8efuGofh4BjE7BCOex3bIL2thjFfm
Behavioral task
behavioral1
Sample
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5
-
Size
1.9MB
-
MD5
4ea919e75eae053c69169dfd3223363b
-
SHA1
4d09579dbef77095cc0be6ba292e8d91c5ba2080
-
SHA256
7a8d95658a14d4216192721e59152e70f946171f2fc304be4d979b1967b4dfe5
-
SHA512
8feea53210ead0d2987b69a1ada66a4faa9295e4fedfa452816ba560118d174dc845d65cdb3b0d30d69cde10cd748b15de6f18629d41eadf606a97b3237073e5
-
SSDEEP
24576:0bxLet15Vf+H7dwofhLjoBj+I5iG8ztZtZ3TtN9GHHOex3Q8xqB8JHmL21Xhj5IV:8efuGofh4BjE7BCOex3bIL2thjFfm
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-