General
-
Target
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02
-
Size
332KB
-
Sample
240601-evfp1sab64
-
MD5
4509521481b2c23082e4c3959e4c37d4
-
SHA1
923e065a81c4401b7a265335ca3850d16e22921b
-
SHA256
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02
-
SHA512
03ef59e273f93e91c9294594380e18833cfdd5c0a1a792a416304e73af0286fc42363de467149d91484d8803d85996f64b4c91c8a6dafaa5d97f3bd81d8f77a6
-
SSDEEP
3072:Vl0/Nglon/yDKfzFLazk76QDPQ8GDiLE:Vlug+nWKF/dQ8Gu
Static task
static1
Behavioral task
behavioral1
Sample
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02
-
Size
332KB
-
MD5
4509521481b2c23082e4c3959e4c37d4
-
SHA1
923e065a81c4401b7a265335ca3850d16e22921b
-
SHA256
de4dbec2803906a8cbb126618ede6f91127efed8323288b2e72e62e6e32fcf02
-
SHA512
03ef59e273f93e91c9294594380e18833cfdd5c0a1a792a416304e73af0286fc42363de467149d91484d8803d85996f64b4c91c8a6dafaa5d97f3bd81d8f77a6
-
SSDEEP
3072:Vl0/Nglon/yDKfzFLazk76QDPQ8GDiLE:Vlug+nWKF/dQ8Gu
Score10/10-
Modifies visiblity of hidden/system files in Explorer
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-