General
- Target Demoman.png
- Size 16KB
- Sample241102-ea2rrazpek
- SHA256 547f9ebf2c35099256e19fae89774798a401be3f004013575ee19bfd2525f6ce
- MD5 266c74ed709de17cab890993d8838dd9
- SHA1 d89960394a29a0ff467ebea2fa12ab46085b9346
- SHA512 fbbdc42fe39ed82ff27a66b63add42b170c5b56e5dfc99e1e2637704af83c88a120ab931e1d44e82082e56ca931a0252e2d7a1c41e13667bb8d43f886a407c51
- SSDEEP 384:8Wx7+TKn0OoufmQa0nQZGNFkMSULlWyml5aIZ9TMf8FlwnCEMxl29Y:l7OKHNQIp/RSGmqKTQI0iHr
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
Malware Config
Targets
-
- Target Demoman.png
- Size 16KB
- SHA256 547f9ebf2c35099256e19fae89774798a401be3f004013575ee19bfd2525f6ce
- MD5 266c74ed709de17cab890993d8838dd9
- SHA1 d89960394a29a0ff467ebea2fa12ab46085b9346
- SHA512 fbbdc42fe39ed82ff27a66b63add42b170c5b56e5dfc99e1e2637704af83c88a120ab931e1d44e82082e56ca931a0252e2d7a1c41e13667bb8d43f886a407c51
- SSDEEP 384:8Wx7+TKn0OoufmQa0nQZGNFkMSULlWyml5aIZ9TMf8FlwnCEMxl29Y:l7OKHNQIp/RSGmqKTQI0iHr
- MD5 SHA1 SHA512 SSDEEP
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL