General
-
Target
Screenshot (1).png
-
Size
2.2MB
-
Sample
240727-eqj7mswglq
-
MD5
bab32b1c158edfdece5366149391e6d8
-
SHA1
85b2b864dd076b6de240235de734352f1ec82d93
-
SHA256
bc70eb0d56e7dd13bc7bc116cc7499c8a4f60b3a482eeaf4457659fdc721048f
-
SHA512
a31cc52a952561334b5b39bccefe0465c4dd6db0afdfdbb6421031c1c59f3eb3cf5e7a92c709bd1bc0cb712923c34914cc77821b99e5ba73b69849ac7ec2550d
-
SSDEEP
49152:hmLv3EuekujSgw5TEzk3XLbMLT6cNfb0m0FIbYx3AHp:hmj0u1abw5hiTB1b0lFZw
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot (1).png
Resource
win10v2004-20240709-en
Behavioral task
behavioral2
Sample
Screenshot (1).png
Resource
win11-20240709-en
Malware Config
Targets
-
-
Target
Screenshot (1).png
-
Size
2.2MB
-
MD5
bab32b1c158edfdece5366149391e6d8
-
SHA1
85b2b864dd076b6de240235de734352f1ec82d93
-
SHA256
bc70eb0d56e7dd13bc7bc116cc7499c8a4f60b3a482eeaf4457659fdc721048f
-
SHA512
a31cc52a952561334b5b39bccefe0465c4dd6db0afdfdbb6421031c1c59f3eb3cf5e7a92c709bd1bc0cb712923c34914cc77821b99e5ba73b69849ac7ec2550d
-
SSDEEP
49152:hmLv3EuekujSgw5TEzk3XLbMLT6cNfb0m0FIbYx3AHp:hmj0u1abw5hiTB1b0lFZw
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-