Resubmissions
24-08-2024 07:47
240824-jmhlvszflb 724-08-2024 07:46
240824-jmgpkasbjp 724-08-2024 07:46
240824-jmgdsszfkh 724-08-2024 07:46
240824-jmfghasbjm 724-08-2024 07:46
240824-jmevzazfkg 724-08-2024 07:46
240824-jmd9fazfke 724-08-2024 07:46
240824-jmdmxasbjk 724-08-2024 07:46
240824-jmc2dazfkc 724-08-2024 07:46
240824-jmaagszfka 724-08-2024 07:46
240824-jl9nyszfjh 7General
-
Target
light.exe
-
Size
161.8MB
-
Sample
240509-kwnd5sce96
-
MD5
add3c83d07da82d5de9f8b1ce7d5e071
-
SHA1
5d1fcb1b98dcb3f8840590a726e941c03aaf1f2a
-
SHA256
799b31e4431401379cd909fbc8825f27e8a1c7172843a755a623257dd003fdce
-
SHA512
65ac5638990c6a100a35fa46bad1ec612f80b6a69a5a48fcc08f2121380b4cc8325cde71081b69641b15e4ca02b03d47fe4e8cea5bfca6fb1b1da3b5575e6a61
-
SSDEEP
3145728:YNU5azpUaH5sLtzPVggXepw/V0s9AcjnDiBOEA+XnNOr1XW4TcIxaya/ZL:YbsLtzPmgAKWs9XjnDiBLAUnNOr1XW4c
Behavioral task
behavioral1
Sample
light.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
light.exe
Resource
win7-20240221-en
Behavioral task
behavioral3
Sample
light.exe
Resource
win10-20240404-en
Behavioral task
behavioral4
Sample
light.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
light.exe
-
Size
161.8MB
-
MD5
add3c83d07da82d5de9f8b1ce7d5e071
-
SHA1
5d1fcb1b98dcb3f8840590a726e941c03aaf1f2a
-
SHA256
799b31e4431401379cd909fbc8825f27e8a1c7172843a755a623257dd003fdce
-
SHA512
65ac5638990c6a100a35fa46bad1ec612f80b6a69a5a48fcc08f2121380b4cc8325cde71081b69641b15e4ca02b03d47fe4e8cea5bfca6fb1b1da3b5575e6a61
-
SSDEEP
3145728:YNU5azpUaH5sLtzPVggXepw/V0s9AcjnDiBOEA+XnNOr1XW4TcIxaya/ZL:YbsLtzPmgAKWs9XjnDiBLAUnNOr1XW4c
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-