General
-
Target
1ba5f737266142034a25bba3c96b39a0N.exe
-
Size
186KB
-
Sample
240818-vtygfavcje
-
MD5
1ba5f737266142034a25bba3c96b39a0
-
SHA1
999cadd34c96791774ed1c8d602ca93c6867ba9a
-
SHA256
4b29989e2f0146d8f18bc647a75b0fd7f881882934c538404fb8dc921dbb64fb
-
SHA512
36764a5f70cc53b8c4e42d9f700bb7b928d03e731758dab2684e083f0040dd466f1b16720d1a6030cada32577a1d8e304f533667f9c641c772be609fcb8f6eae
-
SSDEEP
3072:wvs4dDXEGCLElS1Tj4mYWR/R4nkPR/1aVuy30/kQT62OiZzFu47Fupr3DPUv4i:sPDLCL9Io5R4nM/40yE/cpiZxr7FupbA
Behavioral task
behavioral1
Sample
1ba5f737266142034a25bba3c96b39a0N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1ba5f737266142034a25bba3c96b39a0N.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
1ba5f737266142034a25bba3c96b39a0N.exe
-
Size
186KB
-
MD5
1ba5f737266142034a25bba3c96b39a0
-
SHA1
999cadd34c96791774ed1c8d602ca93c6867ba9a
-
SHA256
4b29989e2f0146d8f18bc647a75b0fd7f881882934c538404fb8dc921dbb64fb
-
SHA512
36764a5f70cc53b8c4e42d9f700bb7b928d03e731758dab2684e083f0040dd466f1b16720d1a6030cada32577a1d8e304f533667f9c641c772be609fcb8f6eae
-
SSDEEP
3072:wvs4dDXEGCLElS1Tj4mYWR/R4nkPR/1aVuy30/kQT62OiZzFu47Fupr3DPUv4i:sPDLCL9Io5R4nM/40yE/cpiZxr7FupbA
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-