General
-
Target
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24
-
Size
2.7MB
-
Sample
240428-wxnl3sdh9x
-
MD5
9582d1056e9446b70745b23e1815749f
-
SHA1
49b46b339f00c7f5a49ad5154c85da1aaf95713e
-
SHA256
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24
-
SHA512
4a210f2709c748e555a3492f090ca696d69b3042f99cc2db9f541e80e59858542625be4aade09d0152aaf892a9207fcb4ae675de8deea8878f6ff3d96255a2e9
-
SSDEEP
49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB29w4Sx:+R0pI/IQlUoMPdmpSpg4
Static task
static1
Behavioral task
behavioral1
Sample
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24.exe
Resource
win10v2004-20240419-en
Malware Config
Targets
-
-
Target
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24
-
Size
2.7MB
-
MD5
9582d1056e9446b70745b23e1815749f
-
SHA1
49b46b339f00c7f5a49ad5154c85da1aaf95713e
-
SHA256
38b6bdb203f62e238ea881ebf68ce7a0f0392bd1e4f24ac833336788118cba24
-
SHA512
4a210f2709c748e555a3492f090ca696d69b3042f99cc2db9f541e80e59858542625be4aade09d0152aaf892a9207fcb4ae675de8deea8878f6ff3d96255a2e9
-
SSDEEP
49152:+R0p8xHycIq+GI27nGroMPTJPer1c2HSjpjK3LB29w4Sx:+R0pI/IQlUoMPdmpSpg4
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-