General
-
Target
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4
-
Size
74KB
-
Sample
240524-dbzs4saf2t
-
MD5
388174eeb5348b0dd998153332fd0f50
-
SHA1
3efc6a00edf83c777aed32cf9256a8df26b6ddc4
-
SHA256
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4
-
SHA512
ddd1547fcd057723fdd290a1489f69e869cabfc13e6eaa1ed955b143f130ba6a99d2585fc2b37ec33679a65f6d419ec44e57c98e9921d3e9d68198d76768ccb1
-
SSDEEP
1536:EQTIubHy5wQiNZgHLl7qJc2fiMIRZprDa8ibxBefES:d4wlNaLlqy2MtDMBIt
Static task
static1
Behavioral task
behavioral1
Sample
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4.exe
Resource
win10v2004-20240426-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4
-
Size
74KB
-
MD5
388174eeb5348b0dd998153332fd0f50
-
SHA1
3efc6a00edf83c777aed32cf9256a8df26b6ddc4
-
SHA256
c2197d294b0bff754524c36d688578607c2c82970255053405230aa898e3a6d4
-
SHA512
ddd1547fcd057723fdd290a1489f69e869cabfc13e6eaa1ed955b143f130ba6a99d2585fc2b37ec33679a65f6d419ec44e57c98e9921d3e9d68198d76768ccb1
-
SSDEEP
1536:EQTIubHy5wQiNZgHLl7qJc2fiMIRZprDa8ibxBefES:d4wlNaLlqy2MtDMBIt
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-