General
-
Target
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3
-
Size
1.6MB
-
Sample
240428-y3yeksgb72
-
MD5
d9e654ef2c44a3cb7f83bbe4480407b0
-
SHA1
0881342a31ca38c93b4e111e99933857799323b3
-
SHA256
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3
-
SHA512
84214aa69a5d44290520791db3bec90271dda7bfaf4ca174403f788c4db07afea13cacac0f4b5fd1c8e537f968a5af4f3e22e66de3731518b9cd967736192a5f
-
SSDEEP
24576:VEj8TMgbMggOBdOiHQc8rY7XqoLxg+k1FiyxiLXMMoWn0Hp7cOIFM67sUkDozAPL:dTMgXdO9c/g+kriy4LX0HpwOIKoCzf
Behavioral task
behavioral1
Sample
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3
-
Size
1.6MB
-
MD5
d9e654ef2c44a3cb7f83bbe4480407b0
-
SHA1
0881342a31ca38c93b4e111e99933857799323b3
-
SHA256
3b40b1651ed9ceb80ed6ca004143400584600e10d64d628258351a83aa5d65a3
-
SHA512
84214aa69a5d44290520791db3bec90271dda7bfaf4ca174403f788c4db07afea13cacac0f4b5fd1c8e537f968a5af4f3e22e66de3731518b9cd967736192a5f
-
SSDEEP
24576:VEj8TMgbMggOBdOiHQc8rY7XqoLxg+k1FiyxiLXMMoWn0Hp7cOIFM67sUkDozAPL:dTMgXdO9c/g+kriy4LX0HpwOIKoCzf
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-