General
-
Target
0ce56b8595353f190a99f781b4fd3360N.exe
-
Size
46KB
-
Sample
240712-22sdqavblm
-
MD5
0ce56b8595353f190a99f781b4fd3360
-
SHA1
93274b71093ce2d6968a22829a05396ae3e8877e
-
SHA256
55ed8100889a7b68510cc61ebe58bb28b423ac311ef9ff0581e26d3414085f1b
-
SHA512
f764d77ee557ac9231019e6f8e2e9a8921f172297e1fab37cc5d865bcb67f75a8f318ebabc4d8e661831d8a619cb37a47c4b3fd2d5b7450db740b57a4adf01ed
-
SSDEEP
768:zIP5WOMVs4PSV06ymNNC6S7Cm1n2OBGRIWNSE77NPQ1TTGfGYi6KH:zI0OGrOy6NvSpMZVQ1J4KH
Static task
static1
Behavioral task
behavioral1
Sample
0ce56b8595353f190a99f781b4fd3360N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0ce56b8595353f190a99f781b4fd3360N.exe
Resource
win10v2004-20240709-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
griptoloji - Password:
741852
Targets
-
-
Target
0ce56b8595353f190a99f781b4fd3360N.exe
-
Size
46KB
-
MD5
0ce56b8595353f190a99f781b4fd3360
-
SHA1
93274b71093ce2d6968a22829a05396ae3e8877e
-
SHA256
55ed8100889a7b68510cc61ebe58bb28b423ac311ef9ff0581e26d3414085f1b
-
SHA512
f764d77ee557ac9231019e6f8e2e9a8921f172297e1fab37cc5d865bcb67f75a8f318ebabc4d8e661831d8a619cb37a47c4b3fd2d5b7450db740b57a4adf01ed
-
SSDEEP
768:zIP5WOMVs4PSV06ymNNC6S7Cm1n2OBGRIWNSE77NPQ1TTGfGYi6KH:zI0OGrOy6NvSpMZVQ1J4KH
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-