General
-
Target
e329aab90fbf0fe5f26c6fbad7e34f10N.exe
-
Size
1.2MB
-
Sample
240816-smxkfsvgql
-
MD5
e329aab90fbf0fe5f26c6fbad7e34f10
-
SHA1
e77d95de1cb79d5b04fec453df7104189bac27af
-
SHA256
4aea218e1480f7492b0d0bd877ee04e5e218be68644d2cd0128d0118c3171239
-
SHA512
ff45ed84810f4e4e8c2dcbf703fd59bf7cbf15f6e642ba42fb87d400c55d7fb57237be263748c75a3ba62928f756fbc92d8d985fc8a256f23fabc1674e6ac243
-
SSDEEP
24576:U4lncn9MB7o23RU4kHBvirnC2XZ/EFHs+ruqzqW6NR6B8cGcLkPpGaWu5qtbPGKJ:WuP2PGWTs
Static task
static1
Behavioral task
behavioral1
Sample
e329aab90fbf0fe5f26c6fbad7e34f10N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
e329aab90fbf0fe5f26c6fbad7e34f10N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
e329aab90fbf0fe5f26c6fbad7e34f10N.exe
-
Size
1.2MB
-
MD5
e329aab90fbf0fe5f26c6fbad7e34f10
-
SHA1
e77d95de1cb79d5b04fec453df7104189bac27af
-
SHA256
4aea218e1480f7492b0d0bd877ee04e5e218be68644d2cd0128d0118c3171239
-
SHA512
ff45ed84810f4e4e8c2dcbf703fd59bf7cbf15f6e642ba42fb87d400c55d7fb57237be263748c75a3ba62928f756fbc92d8d985fc8a256f23fabc1674e6ac243
-
SSDEEP
24576:U4lncn9MB7o23RU4kHBvirnC2XZ/EFHs+ruqzqW6NR6B8cGcLkPpGaWu5qtbPGKJ:WuP2PGWTs
Score8/10-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-