General
-
Target
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93
-
Size
2.2MB
-
Sample
241110-dm8v6aydjg
-
MD5
6232bad0a3bccda0f1c379190fef8929
-
SHA1
3d76146d2ab012f1a6258fbff64627e8d490f0e4
-
SHA256
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93
-
SHA512
5bc0466271c141883a6e054bbbdd6c11292404cdeb4dd7303a8b0e5bf10485c3bef061044349026080ed6050c93db8e864ebee7819a7b5c26fda058ae41a46e3
-
SSDEEP
49152:8JAKL1A4GFERnJfYMKAUVB7bsxr5fy8ckyyoYXtGqOipLCgvhf:NKL1A4G6nJf9aBHsxr5fy8fy7Y9GqZFd
Static task
static1
Behavioral task
behavioral1
Sample
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93
-
Size
2.2MB
-
MD5
6232bad0a3bccda0f1c379190fef8929
-
SHA1
3d76146d2ab012f1a6258fbff64627e8d490f0e4
-
SHA256
d4b7c5e8c0c5488748ad197e36beef284edb85704cdf1c290cb3075c87b34b93
-
SHA512
5bc0466271c141883a6e054bbbdd6c11292404cdeb4dd7303a8b0e5bf10485c3bef061044349026080ed6050c93db8e864ebee7819a7b5c26fda058ae41a46e3
-
SSDEEP
49152:8JAKL1A4GFERnJfYMKAUVB7bsxr5fy8ckyyoYXtGqOipLCgvhf:NKL1A4G6nJf9aBHsxr5fy8fy7Y9GqZFd
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-
Drops file in System32 directory
-