General
-
Target
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29N
-
Size
289KB
-
Sample
241010-arwjvascnc
-
MD5
1bbf3d2f752c521719966873af4e9760
-
SHA1
ce3a55eaa4a5a53629a0614d3905c07de1f2fef1
-
SHA256
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29
-
SHA512
04062dc3206d7c92c3e89a728012f2ba9d07f7cf46fea2dbe5a06f35f148c2b57ef184a5e1e72d8a80054c5813122a0db81479c8f0e9eb64d0b669d953ee362c
-
SSDEEP
6144:fiyz+vqfL+8OaAH2QYepZ3SgkECzJLaQVbU5:qgLOaybYeLdklJLJbU5
Static task
static1
Behavioral task
behavioral1
Sample
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29N.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29N
-
Size
289KB
-
MD5
1bbf3d2f752c521719966873af4e9760
-
SHA1
ce3a55eaa4a5a53629a0614d3905c07de1f2fef1
-
SHA256
39842379b837ad89b30b0675f81ba5fc69beff3b24c954be8114850d7a9c1b29
-
SHA512
04062dc3206d7c92c3e89a728012f2ba9d07f7cf46fea2dbe5a06f35f148c2b57ef184a5e1e72d8a80054c5813122a0db81479c8f0e9eb64d0b669d953ee362c
-
SSDEEP
6144:fiyz+vqfL+8OaAH2QYepZ3SgkECzJLaQVbU5:qgLOaybYeLdklJLJbU5
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-