General
-
Target
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400
-
Size
32KB
-
Sample
240613-xfetaasbkj
-
MD5
bd507e9e77a6c5746a24239d03aced2f
-
SHA1
ed43f8bc3e81e9bfa39b0656702bac3f3ef0726b
-
SHA256
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400
-
SHA512
9290819561ccc9f4ae6cf02cc5c8774052052faf32e923d878f6242e85147289854fbe7e8ba852527fba94388e64a6c33a322f1644005769c41d133659e7b3b8
-
SSDEEP
384:MApc8m4e0DHvQak4JI341CHabnkIU0SqQ0yGUb:MApQr0DHvdFJI341TkIU0eGUb
Static task
static1
Behavioral task
behavioral1
Sample
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400
-
Size
32KB
-
MD5
bd507e9e77a6c5746a24239d03aced2f
-
SHA1
ed43f8bc3e81e9bfa39b0656702bac3f3ef0726b
-
SHA256
056a944014649d2f2d55f6927dcb838e42403abbbb9b62a1c2a7f44373674400
-
SHA512
9290819561ccc9f4ae6cf02cc5c8774052052faf32e923d878f6242e85147289854fbe7e8ba852527fba94388e64a6c33a322f1644005769c41d133659e7b3b8
-
SSDEEP
384:MApc8m4e0DHvQak4JI341CHabnkIU0SqQ0yGUb:MApQr0DHvdFJI341TkIU0eGUb
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-