General
- Target file.exe
- Size 3.1MB
- Sample240728-b6d4sa1cql
- SHA256 b2ffd93569c7eec760892eaa4e6fd1c2e783db89f550153d1123ac69c63483e7
- MD5 a6b9ba406e557a924fbff7546c9b8386
- SHA1 cd4056df2d7b011e8f1e4d9683d122405a88835f
- SHA512 215f58bcd44202a5a044b5c45da45095361cc13960b174b22df9c7805b4e1e609ddfb6c1f0b1db07891c6c79391aa8b2e2b64a48a8955cc81875c125cddf5c21
- SSDEEP 49152:sFQWGTL4ZoT1gmH23VPEy0bFbbFcUYba1/hMi7Nc3MDUe0svL0CA/CKjsCI5J:sFjA1gmHmOv8a1Gi7NvvLfwsC+
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240705-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 3.1MB
- SHA256 b2ffd93569c7eec760892eaa4e6fd1c2e783db89f550153d1123ac69c63483e7
- MD5 a6b9ba406e557a924fbff7546c9b8386
- SHA1 cd4056df2d7b011e8f1e4d9683d122405a88835f
- SHA512 215f58bcd44202a5a044b5c45da45095361cc13960b174b22df9c7805b4e1e609ddfb6c1f0b1db07891c6c79391aa8b2e2b64a48a8955cc81875c125cddf5c21
- SSDEEP 49152:sFQWGTL4ZoT1gmH23VPEy0bFbbFcUYba1/hMi7Nc3MDUe0svL0CA/CKjsCI5J:sFjA1gmHmOv8a1Gi7NvvLfwsC+
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of NtSetInformationThreadHideFromDebugger