General
-
Target
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
-
Size
13.3MB
-
Sample
240513-h3ygksbh9w
-
MD5
9290cdfd556ba52252ae3ade5fdbe5ea
-
SHA1
4f9f60d82465eea4e0941e190a2217d1f82e3f8b
-
SHA256
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
-
SHA512
4f4fb732c9d22ad0bad91a9f2b4ceb26360c3a8a3cc402928e6c13c266deca0f4003c5ba70951b953e46d07768a660ae19bb38c18613115b8b5781f32b70a88a
-
SSDEEP
196608:SEZ+85OKrBzHfuDdunOB/i04ofjU9Xd7P6CVYcrf5m/fLuW8yW4aGm/FOCEn4ROy:nk85cfnbnCVHILezjBgC80OfZTtnH
Behavioral task
behavioral1
Sample
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
-
Size
13.3MB
-
MD5
9290cdfd556ba52252ae3ade5fdbe5ea
-
SHA1
4f9f60d82465eea4e0941e190a2217d1f82e3f8b
-
SHA256
82612f1d6b768a01c3a4f5fc72382c76a0ceeb5326a75f2c766a78123d450057
-
SHA512
4f4fb732c9d22ad0bad91a9f2b4ceb26360c3a8a3cc402928e6c13c266deca0f4003c5ba70951b953e46d07768a660ae19bb38c18613115b8b5781f32b70a88a
-
SSDEEP
196608:SEZ+85OKrBzHfuDdunOB/i04ofjU9Xd7P6CVYcrf5m/fLuW8yW4aGm/FOCEn4ROy:nk85cfnbnCVHILezjBgC80OfZTtnH
Score8/10-
Downloads MZ/PE file
-
Sets file execution options in registry
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.
-