General
-
Target
Built.exe
-
Size
155KB
-
Sample
240810-q8btrswfka
-
MD5
b4961df63a672c111c5a6a3beab28883
-
SHA1
d2656bc353d8dc08da0108de3aec47a36cc8be66
-
SHA256
0ceb6182c9f4d91cf6530acf3ea629f72c54fa343dde21678e4eb3a2095eded0
-
SHA512
624d94fa15cc2892450d75147a2c340701e0b62f56010b7a6a52ee4208c7120630bee055d5863ca932eb99c699305b6b67496555953771b86a11823ca4e75d4a
-
SSDEEP
3072:bCLQ8Z+EYUbq1O8lGzBZ+EYUbq1O8lGzG6bCVTh:bCLHLbjfLbjK6bk
Malware Config
Targets
-
-
Target
Built.exe
-
Size
155KB
-
MD5
b4961df63a672c111c5a6a3beab28883
-
SHA1
d2656bc353d8dc08da0108de3aec47a36cc8be66
-
SHA256
0ceb6182c9f4d91cf6530acf3ea629f72c54fa343dde21678e4eb3a2095eded0
-
SHA512
624d94fa15cc2892450d75147a2c340701e0b62f56010b7a6a52ee4208c7120630bee055d5863ca932eb99c699305b6b67496555953771b86a11823ca4e75d4a
-
SSDEEP
3072:bCLQ8Z+EYUbq1O8lGzBZ+EYUbq1O8lGzG6bCVTh:bCLHLbjfLbjK6bk
-
Async RAT payload
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-