General
-
Target
calc.exe
-
Size
422KB
-
Sample
241002-bmvbnatdna
-
MD5
4bf28f0b6a5b20681a1378a0d8afe694
-
SHA1
f606479738c2e8dbb67cd9998dc35c830425c559
-
SHA256
cf6b9d70a6b10490407df35b3fb8968de048328614171ab5c9de51d7638eed3a
-
SHA512
73dd9e42e0e8489435b96776df67adb8729c47d06fecb4555447975a8f40c68980c9792446dfad2967888b45e69bbab58c29950d2089097c37ac3cb8477171ae
-
SSDEEP
6144:94v4sIND/AB4jYWoyGN2Ik5AfPjFWFNAy/7+dOYG+/Wi+3I:WABhABEXotkI0A8AyzKOce4
Static task
static1
Behavioral task
behavioral1
Sample
calc.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
calc.exe
-
Size
422KB
-
MD5
4bf28f0b6a5b20681a1378a0d8afe694
-
SHA1
f606479738c2e8dbb67cd9998dc35c830425c559
-
SHA256
cf6b9d70a6b10490407df35b3fb8968de048328614171ab5c9de51d7638eed3a
-
SHA512
73dd9e42e0e8489435b96776df67adb8729c47d06fecb4555447975a8f40c68980c9792446dfad2967888b45e69bbab58c29950d2089097c37ac3cb8477171ae
-
SSDEEP
6144:94v4sIND/AB4jYWoyGN2Ik5AfPjFWFNAy/7+dOYG+/Wi+3I:WABhABEXotkI0A8AyzKOce4
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-