General
-
Target
METROCRAFT2036.exe
-
Size
1.3MB
-
Sample
240801-z8lhms1brb
-
MD5
9f5ae9b3a709b8df3ec6b9d18c930d2a
-
SHA1
711a0c3fb091d1a30f14afcfa0426ec6e530fe15
-
SHA256
ce27c3f2c36363b75bc88c8a52ee1ee2c79717647b292ca4cfb1ffe74d9dc0b6
-
SHA512
7410be530c89a998dfb697fdfaa65e5c4a489746e40265e9212e4ab3813fea83bc8b89409b3b1a6c4416aae9b510370d4b81bc62112dae22dff06dda57eee4d9
-
SSDEEP
12288:i+oefbSFWxONMC9jrb9jxHE2lc4ltiFN9kUiC9yumXTNT6ebBPvQL32ikCaUS4cG:/ogeOf+c067iCnmXZT713y3k94cunZe
Static task
static1
Behavioral task
behavioral1
Sample
METROCRAFT2036.exe
Resource
win10v2004-20240730-en
Malware Config
Targets
-
-
Target
METROCRAFT2036.exe
-
Size
1.3MB
-
MD5
9f5ae9b3a709b8df3ec6b9d18c930d2a
-
SHA1
711a0c3fb091d1a30f14afcfa0426ec6e530fe15
-
SHA256
ce27c3f2c36363b75bc88c8a52ee1ee2c79717647b292ca4cfb1ffe74d9dc0b6
-
SHA512
7410be530c89a998dfb697fdfaa65e5c4a489746e40265e9212e4ab3813fea83bc8b89409b3b1a6c4416aae9b510370d4b81bc62112dae22dff06dda57eee4d9
-
SSDEEP
12288:i+oefbSFWxONMC9jrb9jxHE2lc4ltiFN9kUiC9yumXTNT6ebBPvQL32ikCaUS4cG:/ogeOf+c067iCnmXZT713y3k94cunZe
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-