General
-
Target
c8432b773d48e5e0a9f2d1ecb7c557f8.bin
-
Size
2.2MB
-
Sample
240609-fjgnlsdh6x
-
MD5
cc5685557d1555f460fb338683907e10
-
SHA1
1e577c55dbfd78fa16b4035b18a508591f40b370
-
SHA256
944e157445ebb73a3fa0af3f729a8fb06db3440885daa5d18dd83dabb0b42e9c
-
SHA512
02dd443f1ef4aacc6c9acdb3affd347785393cc371ae995d40940f0388f56db48a1d75cefb29efff24681e3014cc105996765b47d9f26c6dce3e5dd058cc2516
-
SSDEEP
49152:9lyGZSDIC0HPT2dvOOPHbFQL3HhUNTeLdTxbiMwh+BpiBt1e5ak:TTyIBHPCpfiueLRxbEh+Bp1
Static task
static1
Behavioral task
behavioral1
Sample
68a9e97be5bec9fba6108897ebef0a1f00dec90cf894071dc80ba0fed62a2999.exe
Resource
win7-20240221-en
Malware Config
Extracted
risepro
77.91.77.122:50500
Targets
-
-
Target
68a9e97be5bec9fba6108897ebef0a1f00dec90cf894071dc80ba0fed62a2999.exe
-
Size
2.6MB
-
MD5
c8432b773d48e5e0a9f2d1ecb7c557f8
-
SHA1
ffd30a12849776a23351e9e768fc7b635553c271
-
SHA256
68a9e97be5bec9fba6108897ebef0a1f00dec90cf894071dc80ba0fed62a2999
-
SHA512
7d2e4e382f9591f0ba5098d6a265f6b70b5a6c360f6223ac0309edf7bea7c13c4b951888244ddafb512127b2c192075aeaf77a93ded3a1336e822abcfd83ebc8
-
SSDEEP
49152:KDjlabwz9PDjlabwz96f+wrja6tTPZYoUKm5OeNRwXIM2BfM3:6qwhqws+ia6tzZ1Zm5OmRwX0B+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-