General
-
Target
Screenshot 2024-09-29 020243.png
-
Size
19KB
-
Sample
241002-sv4czaxcpe
-
MD5
b6a3fe3b64cee00756281a1693b1c1f6
-
SHA1
4e999ac7ab94885763e840971d5e88972232c5fb
-
SHA256
a0a6ebd905c56e59a1b24c44a483d50b87c536bf4bbc12ac2a5099a251d5d5ca
-
SHA512
08a9fe6a100887335a1a7499e1d2fc9236b0221902dd0f04aa14f2cba0dd7e825c36fd5d8ba1625c114ef76e392a655d5484903563cbd949ed23b2131818a401
-
SSDEEP
384:mi2q8YvozqdmbVyn0+LvNPIao3vYNZ5289lPNok5ki2Af9548:HcK3eyVLTX/Ae1Mi2Af348
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot 2024-09-29 020243.png
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
Screenshot 2024-09-29 020243.png
-
Size
19KB
-
MD5
b6a3fe3b64cee00756281a1693b1c1f6
-
SHA1
4e999ac7ab94885763e840971d5e88972232c5fb
-
SHA256
a0a6ebd905c56e59a1b24c44a483d50b87c536bf4bbc12ac2a5099a251d5d5ca
-
SHA512
08a9fe6a100887335a1a7499e1d2fc9236b0221902dd0f04aa14f2cba0dd7e825c36fd5d8ba1625c114ef76e392a655d5484903563cbd949ed23b2131818a401
-
SSDEEP
384:mi2q8YvozqdmbVyn0+LvNPIao3vYNZ5289lPNok5ki2Af9548:HcK3eyVLTX/Ae1Mi2Af348
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-