General
-
Target
calc.exe
-
Size
201KB
-
Sample
241005-2lknyavenk
-
MD5
2f9fdad776d8626f2ce8625211831e91
-
SHA1
21d8413eb0d60b36fc249f8025c277b557fefde3
-
SHA256
9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813
-
SHA512
2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb
-
SSDEEP
6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG
Behavioral task
behavioral1
Sample
calc.exe
Resource
win7-20240903-en
Malware Config
Targets
-
-
Target
calc.exe
-
Size
201KB
-
MD5
2f9fdad776d8626f2ce8625211831e91
-
SHA1
21d8413eb0d60b36fc249f8025c277b557fefde3
-
SHA256
9b66a8ea0f1c64965b06e7a45afbe56f2d4e6d5ef65f32446defccbebe730813
-
SHA512
2abd61c6bea7c748f81cdd18133582217bd06dd19506f13f89953f8c7bd662fc5233540b9f56c57aa94e038c674128fc46dd280e2f7db642343fc5a45da25feb
-
SSDEEP
6144:96LkVO8A1X2og0tEHH45Y0KTIVaTycTVDNe4oI:TMJ1X2og0MHGKT3RRwG
-
Grants admin privileges
Uses net.exe to modify the user's privileges.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-