General
-
Target
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882
-
Size
2.8MB
-
Sample
240512-xd6tzsdg84
-
MD5
ae13c23cad4370cdaaaa690a8a7e3c14
-
SHA1
5e2b3b31bdfce478d7a6d3ad681d84b40c911a9c
-
SHA256
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882
-
SHA512
ddbb0bd84ec98a451e2d4b214826dc94a8ceb00b2daa7f54d27d837b439d662be0ab691a022b5e1f911a583a3be6dd2dd1271f94068b5932e55f7e041b4ecdc9
-
SSDEEP
49152:Ls8YbWXeSziEMyLqwCvOvlRO5VK1wTeJxx:IB2lROPKWTeH
Static task
static1
Behavioral task
behavioral1
Sample
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral2
Sample
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882.exe
Resource
win11-20240426-en
Malware Config
Targets
-
-
Target
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882
-
Size
2.8MB
-
MD5
ae13c23cad4370cdaaaa690a8a7e3c14
-
SHA1
5e2b3b31bdfce478d7a6d3ad681d84b40c911a9c
-
SHA256
1dd4c3eec793d5bed9593e1fa3970f99ce907d1b2c342006fbadc96859b73882
-
SHA512
ddbb0bd84ec98a451e2d4b214826dc94a8ceb00b2daa7f54d27d837b439d662be0ab691a022b5e1f911a583a3be6dd2dd1271f94068b5932e55f7e041b4ecdc9
-
SSDEEP
49152:Ls8YbWXeSziEMyLqwCvOvlRO5VK1wTeJxx:IB2lROPKWTeH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-