General
- Target gretdence.exe
- Size 995KB
- Sample240914-l13kasyarm
- SHA256 891306bc14e8d196e6f229dfe9d713bb1e81af30efe5ea786672648cbe6fd032
- MD5 969c9a7bc2e46a078fac7c27ad79fc56
- SHA1 4047fed227464f275c40b44a1adb49bbb6072b88
- SHA512 0285f94d1de7e194d18f53eb1b3ad669fafa0a5dee45e7eab9ebd1e807e65ded235d360969225d0c1a54c8cf97b2da6ad14676320aa621845e28d9a38120ddbb
- SSDEEP 24576:q9w4d0VZcM0nG4fyVtHh0nut8gJXFywMgzwZCOIW1MnPvF:qmr31deutFlFJMgzeCOIW1MPd
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
gretdence.exe
Resource
win7-20240708-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
gretdence.exe
Resource
win10-20240404-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
gretdence.exe
Resource
win10v2004-20240802-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target gretdence.exe
- Size 995KB
- SHA256 891306bc14e8d196e6f229dfe9d713bb1e81af30efe5ea786672648cbe6fd032
- MD5 969c9a7bc2e46a078fac7c27ad79fc56
- SHA1 4047fed227464f275c40b44a1adb49bbb6072b88
- SHA512 0285f94d1de7e194d18f53eb1b3ad669fafa0a5dee45e7eab9ebd1e807e65ded235d360969225d0c1a54c8cf97b2da6ad14676320aa621845e28d9a38120ddbb
- SSDEEP 24576:q9w4d0VZcM0nG4fyVtHh0nut8gJXFywMgzwZCOIW1MnPvF:qmr31deutFlFJMgzeCOIW1MPd
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist