General
-
Target
e450ca946d4bf6173ebe3f00c3d08d81.bin
-
Size
402KB
-
Sample
240709-ctwnqsteqh
-
MD5
65603b2126f0f6b0858979ff7d95ca74
-
SHA1
4d25a1aa0a06eaad27f93bd013dc11d304f216c2
-
SHA256
d278aa079205cf4bb605de28bc6d6eca5a63b4cdd9d0c7488c40945d2b90b0a0
-
SHA512
55eb708f7506b6eea7abb83e7fb8d0adae5a4bb20c64d9446c8609fdfc40c730c24e2a46144ab5ae97880460692fb67aaf5b8d72441da9f722bec6a11a7cad67
-
SSDEEP
12288:b4EVLllbzI6QoKD4sBVQKACTITZJ1Ls/mST:5BHsnoKD5XTi4
Behavioral task
behavioral1
Sample
44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff.exe
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff.exe
-
Size
914KB
-
MD5
e450ca946d4bf6173ebe3f00c3d08d81
-
SHA1
3653f8f0231dfad94100f3f3ae3fbae0c3b0d208
-
SHA256
44e715e3d9b5434c099452cc2cd991b1f02d4aba25114341a37dc142efd089ff
-
SHA512
9c884eb29f2d084973a7cc760d3c4e41f3601ef9b22081e083e371301d5b6b22d8e52cacaf6e4a2fd7466d5819876a69921326fa59a24ff75ed85297cda88fba
-
SSDEEP
24576:Wi1kZ9SO9RfhEQ9A1rQmbGSbcG4SuyKs+P/3aC:rkZ9SO9RfpmOSbcGdJKsyaC
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-