General
- Target file.exe
- Size 3.1MB
- Sample240728-ej3qeaxalr
- SHA256 c365e95fd2b896e52e3ea71b9385cc11b3e3ae92070fbbd5fbb9374ff7f4fb41
- MD5 627af011621c1ac40e5ecba7e3fbb25d
- SHA1 ffa39a8406b7a93c252c985b02ca372ee5b3882b
- SHA512 a4625c8cb37fc2a649bc683a0e4b058b009df6091aa3514570e8956b0da518e00d59ff2a02ab7fa524a1305c944a94d34079a414a9e6004aaff5cbaae7ecccf3
- SSDEEP 49152:LLm+NTJt+TE7C50lgoaC34hHDR86FTDVXiP7uaVfjntknche9qn84IerhJYsJ+v0:f3tuEOeiCIdDR86FTD+NfbzeOIK/x
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20240704-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20240709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 3.1MB
- SHA256 c365e95fd2b896e52e3ea71b9385cc11b3e3ae92070fbbd5fbb9374ff7f4fb41
- MD5 627af011621c1ac40e5ecba7e3fbb25d
- SHA1 ffa39a8406b7a93c252c985b02ca372ee5b3882b
- SHA512 a4625c8cb37fc2a649bc683a0e4b058b009df6091aa3514570e8956b0da518e00d59ff2a02ab7fa524a1305c944a94d34079a414a9e6004aaff5cbaae7ecccf3
- SSDEEP 49152:LLm+NTJt+TE7C50lgoaC34hHDR86FTDVXiP7uaVfjntknche9qn84IerhJYsJ+v0:f3tuEOeiCIdDR86FTD+NfbzeOIK/x
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of NtSetInformationThreadHideFromDebugger