General
- Target 6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0
- Size 12KB
- Sample240607-a6ymraef7w
- SHA256 6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0
- MD5 0ea427b7664cbe9fb723d89ec32158f7
- SHA1 29862f8f1ba307c3f60433545b00d1c7cc3281b2
- SHA512 c6c086fa82d0d89899f5fbeace4a5a2053099b49ea7f74cef22b4cbe23f1e80271249475a3fa5efd7f88baf0aa3508b78c6e7b37c19cbbdae29bdd9e5396e766
- SSDEEP 384:tL7li/2z5q2DcEQvdhcJKLTp/NK9xal1:9ZM/Q9cl1
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0.exe
Resource
win7-20231129-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0.exe
Resource
win10v2004-20240426-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0
- Size 12KB
- SHA256 6ea3ab9b0430e8afc8a86659ed214a10c2d495fb88462d9136b255f1a17f6ea0
- MD5 0ea427b7664cbe9fb723d89ec32158f7
- SHA1 29862f8f1ba307c3f60433545b00d1c7cc3281b2
- SHA512 c6c086fa82d0d89899f5fbeace4a5a2053099b49ea7f74cef22b4cbe23f1e80271249475a3fa5efd7f88baf0aa3508b78c6e7b37c19cbbdae29bdd9e5396e766
- SSDEEP 384:tL7li/2z5q2DcEQvdhcJKLTp/NK9xal1:9ZM/Q9cl1
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Uses the VBS compiler for execution