General
- Target random.exe
- Size 3.1MB
- Sample240729-sn192aydmf
- SHA256 5fccdd53fc7b1aa087c80dea2b089e8f90e190711258260df3d0271d152dd8ab
- MD5 9fc25040185a6c2e9773f81388f214c2
- SHA1 20ab8d32ea0f0df9f278374f51811280a537bacf
- SHA512 1c55a5de33a2bf1fc42abff0e313da41a100a8ee9e3902836fec07914a3bb34282d72c9c2601ab7b1c5942718c244ba8c18faefdeaa38e2211bd26c6924d9be5
- SSDEEP 98304:Uu6Mn5DsK1QBm4/YsIay+y4Q62g+xaz8S:eM5DsZmEYdPDrr
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
random.exe
Resource
win7-20240705-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
random.exe
Resource
win10v2004-20240709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target random.exe
- Size 3.1MB
- SHA256 5fccdd53fc7b1aa087c80dea2b089e8f90e190711258260df3d0271d152dd8ab
- MD5 9fc25040185a6c2e9773f81388f214c2
- SHA1 20ab8d32ea0f0df9f278374f51811280a537bacf
- SHA512 1c55a5de33a2bf1fc42abff0e313da41a100a8ee9e3902836fec07914a3bb34282d72c9c2601ab7b1c5942718c244ba8c18faefdeaa38e2211bd26c6924d9be5
- SSDEEP 98304:Uu6Mn5DsK1QBm4/YsIay+y4Q62g+xaz8S:eM5DsZmEYdPDrr
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Suspicious use of NtSetInformationThreadHideFromDebugger