General
-
Target
36406ab959b6716803de0a86a73d38e1921e3908282db353fcfc5a395880eebd
-
Size
7.2MB
-
Sample
240601-jwhm8aeg5z
-
MD5
aab40ee1a58b9d0dc287172af3080932
-
SHA1
217722743119de9c2a52c975edef82aae2263860
-
SHA256
36406ab959b6716803de0a86a73d38e1921e3908282db353fcfc5a395880eebd
-
SHA512
32b0e30787dfd2c747875c1e9ffd23d4436eb282d919edf0f2de8413020f47a003a6c2ad6d0490e285d996d9e846359a8158852b9ccf64681b72fa7e1e6d9b73
-
SSDEEP
196608:91OuihDkDG9G428bAy0R9amEKyntKC6nzzkVVZnVf:3Ou+OG9GEW9amEZICQz8VZVf
Static task
static1
Behavioral task
behavioral1
Sample
36406ab959b6716803de0a86a73d38e1921e3908282db353fcfc5a395880eebd.exe
Resource
win10v2004-20240426-en
Malware Config
Targets
-
-
Target
36406ab959b6716803de0a86a73d38e1921e3908282db353fcfc5a395880eebd
-
Size
7.2MB
-
MD5
aab40ee1a58b9d0dc287172af3080932
-
SHA1
217722743119de9c2a52c975edef82aae2263860
-
SHA256
36406ab959b6716803de0a86a73d38e1921e3908282db353fcfc5a395880eebd
-
SHA512
32b0e30787dfd2c747875c1e9ffd23d4436eb282d919edf0f2de8413020f47a003a6c2ad6d0490e285d996d9e846359a8158852b9ccf64681b72fa7e1e6d9b73
-
SSDEEP
196608:91OuihDkDG9G428bAy0R9amEKyntKC6nzzkVVZnVf:3Ou+OG9GEW9amEZICQz8VZVf
-
Blocklisted process makes network request
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops Chrome extension
-
Drops desktop.ini file(s)
-
Drops file in System32 directory
-