General
-
Target
ce734b560d7b8b8893c6cfcc36dbf890N.exe
-
Size
47KB
-
Sample
240901-a2vejavdpq
-
MD5
ce734b560d7b8b8893c6cfcc36dbf890
-
SHA1
be059883232d53880e4a4bed6e41bae2993efc05
-
SHA256
758e5b347e6df5b666bd1dd553afe3244f79707a09c8788023b3308b0697b34e
-
SHA512
68b201e465700bb23b85627bf5bb0d9765ee9a3dae8cfb9a14ffb2509468669354c6fc6f62b61897cc1d0d17d0f255fb0a64ec34e6306b2e2b23362027e9101f
-
SSDEEP
768:kflivXrVKpVhKvtxwYHwVFoeAQXmucwUKzdlPPKE04+:alqrVKprVuQX7z7PV+
Static task
static1
Behavioral task
behavioral1
Sample
ce734b560d7b8b8893c6cfcc36dbf890N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ce734b560d7b8b8893c6cfcc36dbf890N.exe
Resource
win10v2004-20240802-en
Malware Config
Extracted
Protocol: ftp- Host:
ftp.tripod.com - Port:
21 - Username:
onthelinux - Password:
741852abc
Targets
-
-
Target
ce734b560d7b8b8893c6cfcc36dbf890N.exe
-
Size
47KB
-
MD5
ce734b560d7b8b8893c6cfcc36dbf890
-
SHA1
be059883232d53880e4a4bed6e41bae2993efc05
-
SHA256
758e5b347e6df5b666bd1dd553afe3244f79707a09c8788023b3308b0697b34e
-
SHA512
68b201e465700bb23b85627bf5bb0d9765ee9a3dae8cfb9a14ffb2509468669354c6fc6f62b61897cc1d0d17d0f255fb0a64ec34e6306b2e2b23362027e9101f
-
SSDEEP
768:kflivXrVKpVhKvtxwYHwVFoeAQXmucwUKzdlPPKE04+:alqrVKprVuQX7z7PV+
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-