General
-
Target
PekzLOG.exe
-
Size
535KB
-
Sample
240824-t27veaygph
-
MD5
5504cead28af15658cd2c26c358759e6
-
SHA1
5d444a6f79f1ce9069c4a940687ced21b96e616c
-
SHA256
f2cea2ace90fadcf5ee82ed9ebc1f7dc577a3b1fbce75b2831c1b170879d5494
-
SHA512
ce79c86f3ac81b9e8786e49af78b13f1804635d64d19d2798b00e05b201433c0297a99cf09fabe4f05ddd0c4327ed72982049fbee4b209724de543bfd20ac188
-
SSDEEP
12288:PDcHFdwvfQky4ng/q2cTvw/oXTQUxTkGAVTeTveexB2sOr:PDcHF6XHBeWUoXv5lokee+r
Static task
static1
Behavioral task
behavioral1
Sample
PekzLOG.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
PekzLOG.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
PekzLOG.exe
-
Size
535KB
-
MD5
5504cead28af15658cd2c26c358759e6
-
SHA1
5d444a6f79f1ce9069c4a940687ced21b96e616c
-
SHA256
f2cea2ace90fadcf5ee82ed9ebc1f7dc577a3b1fbce75b2831c1b170879d5494
-
SHA512
ce79c86f3ac81b9e8786e49af78b13f1804635d64d19d2798b00e05b201433c0297a99cf09fabe4f05ddd0c4327ed72982049fbee4b209724de543bfd20ac188
-
SSDEEP
12288:PDcHFdwvfQky4ng/q2cTvw/oXTQUxTkGAVTeTveexB2sOr:PDcHF6XHBeWUoXv5lokee+r
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Obfuscated with Agile.Net obfuscator
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-