General
-
Target
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6
-
Size
519KB
-
Sample
240420-dgby8see78
-
MD5
a9d75dcff66c6a67718caa6df7dc7996
-
SHA1
67891c8e37a6e1f6ee87a924fc8bac8fe13796b9
-
SHA256
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6
-
SHA512
1a1492d3ea693946da3f82da0064512ef3f8c0723172d4aa8db7a81f820db69ab31d95fa31eecd74d371aacca124a77b795f94f7bb81d85e3357769b8cf59b32
-
SSDEEP
12288:JEyDMhqh7+SS6Bkw4YNGnBSs3IJSfKyXAUVGHFAEo/LuF:JB7+HsrjAB0OKgvGlFsuF
Behavioral task
behavioral1
Sample
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6
-
Size
519KB
-
MD5
a9d75dcff66c6a67718caa6df7dc7996
-
SHA1
67891c8e37a6e1f6ee87a924fc8bac8fe13796b9
-
SHA256
cd4d244b9b41bec38fb4ef3da6bc1c64ffc7714f69bcbf1cff8223e09c98efb6
-
SHA512
1a1492d3ea693946da3f82da0064512ef3f8c0723172d4aa8db7a81f820db69ab31d95fa31eecd74d371aacca124a77b795f94f7bb81d85e3357769b8cf59b32
-
SSDEEP
12288:JEyDMhqh7+SS6Bkw4YNGnBSs3IJSfKyXAUVGHFAEo/LuF:JB7+HsrjAB0OKgvGlFsuF
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-