General
-
Target
file.exe
-
Size
662KB
-
Sample
240516-zgzk7afe3x
-
MD5
d031aae0c4b488067297beb2dc26460f
-
SHA1
7a2fa90c458468651846532d2876eefc7fe15ea2
-
SHA256
cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15
-
SHA512
4c7538977edf03602b9b4c29acf4e428850a46cfd9bb448dbc39277d75b4536977baa3c0f370ec2065a837af49d049be14a0fd936b06955dcfb352d6ce3ab3d0
-
SSDEEP
12288:GubsNSOetfARQAPyGUu7zhubsNSOetfARQAPyGUfT+tkrnC/bv8:GubsnafAPyjSzhubsnafAPyjZrnEL8
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240221-en
Malware Config
Extracted
systembc
cobusabobus.cam:4001
Targets
-
-
Target
file.exe
-
Size
662KB
-
MD5
d031aae0c4b488067297beb2dc26460f
-
SHA1
7a2fa90c458468651846532d2876eefc7fe15ea2
-
SHA256
cf1c390eeb26fbff647586a1a05e4fe11957af00a4098258e841e18a1d421f15
-
SHA512
4c7538977edf03602b9b4c29acf4e428850a46cfd9bb448dbc39277d75b4536977baa3c0f370ec2065a837af49d049be14a0fd936b06955dcfb352d6ce3ab3d0
-
SSDEEP
12288:GubsNSOetfARQAPyGUu7zhubsNSOetfARQAPyGUfT+tkrnC/bv8:GubsnafAPyjSzhubsnafAPyjZrnEL8
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-