General
-
Target
Arctic External RBX.exe
-
Size
28KB
-
Sample
240927-r3gnhazdkc
-
MD5
98ce7381766301417b81fdcee8d118f3
-
SHA1
d1ccec2ad8027cd584f43a6b79d66307cce86e97
-
SHA256
07df87e8302927f83d1b39f9674bc7fbdc14a0f549e981612bd45d122c268cdf
-
SHA512
1d65146c46db7d2c03a5927de3e8fc60666bfe7b193b583cd49d830c91f823a452a571e8b49bd83829ffc7a727eaf627922973b6809cd8cb18df0e8bfa660a16
-
SSDEEP
384:yHthk9sZK4TXq/RClTelLE/3R0o3/nmS8eC1HlrZtJzq/OdGUGs5xjHc2ZXod2/v:yzu0UNEPRCDrJRLdi
Static task
static1
Behavioral task
behavioral1
Sample
Arctic External RBX.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
Arctic External RBX.exe
-
Size
28KB
-
MD5
98ce7381766301417b81fdcee8d118f3
-
SHA1
d1ccec2ad8027cd584f43a6b79d66307cce86e97
-
SHA256
07df87e8302927f83d1b39f9674bc7fbdc14a0f549e981612bd45d122c268cdf
-
SHA512
1d65146c46db7d2c03a5927de3e8fc60666bfe7b193b583cd49d830c91f823a452a571e8b49bd83829ffc7a727eaf627922973b6809cd8cb18df0e8bfa660a16
-
SSDEEP
384:yHthk9sZK4TXq/RClTelLE/3R0o3/nmS8eC1HlrZtJzq/OdGUGs5xjHc2ZXod2/v:yzu0UNEPRCDrJRLdi
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-