General
-
Target
sample
-
Size
20KB
-
Sample
241027-wsrsyazgnd
-
MD5
93ae068711fddac033745c00434407b3
-
SHA1
3f87ea1f2e1ce4b5cae8c6a0b89e81c56bfd6e3f
-
SHA256
a27afbea3ab59a6766862c29f9d75e632d660124ece1dd0e8eec17dbb678904a
-
SHA512
1dbc2f664d29c99041d1e3ce899b1c57f11bf048c5fd8b4858d9984b38c3b613ea620cff0c500dc44412bb156b2f89f16a450b3cb036bed605b5c178042922c7
-
SSDEEP
384:943wNwf8Sspa1ocy4T4lbGa+7vhpNZGvcdJPro2REu4Y0wM1OTfF1xCejiw:KwO0E1ocy48EaMJpNEvIJPrEu4Y0wM14
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sample.html
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
sample.html
Resource
win10ltsc2021-20241023-en
Behavioral task
behavioral4
Sample
sample.html
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
sample
-
Size
20KB
-
MD5
93ae068711fddac033745c00434407b3
-
SHA1
3f87ea1f2e1ce4b5cae8c6a0b89e81c56bfd6e3f
-
SHA256
a27afbea3ab59a6766862c29f9d75e632d660124ece1dd0e8eec17dbb678904a
-
SHA512
1dbc2f664d29c99041d1e3ce899b1c57f11bf048c5fd8b4858d9984b38c3b613ea620cff0c500dc44412bb156b2f89f16a450b3cb036bed605b5c178042922c7
-
SSDEEP
384:943wNwf8Sspa1ocy4T4lbGa+7vhpNZGvcdJPro2REu4Y0wM1OTfF1xCejiw:KwO0E1ocy48EaMJpNEvIJPrEu4Y0wM14
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-