General
-
Target
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28
-
Size
1.4MB
-
Sample
240419-3yaj6sag78
-
MD5
9f39d2cd021564aa193c4fe7c4a1f66a
-
SHA1
195d87004137b46ff58e03d50fed7cfd2b130dd7
-
SHA256
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28
-
SHA512
ed6530eb6ca65165b30c94af2a29503842b3ccf60d4f1fb1e6acca4ebb5d413822f0b0d0a8f21b72b9ed27ee051e4d0a90dc4b843c1fc4aebf3f3641758fffeb
-
SSDEEP
24576:A8s1YvedhtEBhJalNAY2BztmRyy4JOZ2oK3BC5uLpAYoXs:A91CytEOaAw4uLqm
Behavioral task
behavioral1
Sample
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28.exe
Resource
win10v2004-20240412-en
Malware Config
Targets
-
-
Target
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28
-
Size
1.4MB
-
MD5
9f39d2cd021564aa193c4fe7c4a1f66a
-
SHA1
195d87004137b46ff58e03d50fed7cfd2b130dd7
-
SHA256
8939f4d842261efc3eabb2ea9e378c9f5670f8d5de213d89d3c330a164cc6d28
-
SHA512
ed6530eb6ca65165b30c94af2a29503842b3ccf60d4f1fb1e6acca4ebb5d413822f0b0d0a8f21b72b9ed27ee051e4d0a90dc4b843c1fc4aebf3f3641758fffeb
-
SSDEEP
24576:A8s1YvedhtEBhJalNAY2BztmRyy4JOZ2oK3BC5uLpAYoXs:A91CytEOaAw4uLqm
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-