General
-
Target
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816N
-
Size
232KB
-
Sample
241030-t2l8psynap
-
MD5
1879176e66489ccf69ab303d95e7ce20
-
SHA1
20d945d198a5b2a4964503779e9ce4a74546def1
-
SHA256
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816
-
SHA512
3f259ef3c6e5b5522bcc62c964f4f0419a224396f5b8b299c71d5ddefbbab1544f3f381d61f5b0aafab2788e494991d9258b8f2266c29e38f136ae3c11e99b3b
-
SSDEEP
3072:7I1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5s1i/NU82OMYcYYamv5b:Ki/NjO5YBgegD0PHzSni/N+O7
Behavioral task
behavioral1
Sample
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816N.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816N
-
Size
232KB
-
MD5
1879176e66489ccf69ab303d95e7ce20
-
SHA1
20d945d198a5b2a4964503779e9ce4a74546def1
-
SHA256
f46824a098ed7fd8b6e18172fd08ca4854b32c61c8ce8c4c7b392eb52c572816
-
SHA512
3f259ef3c6e5b5522bcc62c964f4f0419a224396f5b8b299c71d5ddefbbab1544f3f381d61f5b0aafab2788e494991d9258b8f2266c29e38f136ae3c11e99b3b
-
SSDEEP
3072:7I1i/NU8bOMYcYYcmy5cU+gTn6HOjDhWrzvvQwlgO5s1i/NU82OMYcYYamv5b:Ki/NjO5YBgegD0PHzSni/N+O7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories
-