General
-
Target
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4N
-
Size
232KB
-
Sample
241110-kbg2masnb1
-
MD5
2d0edc5f950def4cae57a46ea61da160
-
SHA1
cc17823bec6813d10b27519afd18a51ebe933499
-
SHA256
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4
-
SHA512
236ecf1c778ef92c2e8283804154856d5f72af174710ca2fd0f4485e0a738f6c443825f4c89dba2d5b0b4b2a6a9728cef46252066f11c019d5621c059f8b8f46
-
SSDEEP
3072:q1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1Vne1i/NU82OMYcYU:Ui/NjO5xbg/CSUFLTwMjs6wi/N+O7
Behavioral task
behavioral1
Sample
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4N.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4N
-
Size
232KB
-
MD5
2d0edc5f950def4cae57a46ea61da160
-
SHA1
cc17823bec6813d10b27519afd18a51ebe933499
-
SHA256
4a9a88767301ebd4d4277fa0a1b5600d982414a71b9b8a0301c260795683c7a4
-
SHA512
236ecf1c778ef92c2e8283804154856d5f72af174710ca2fd0f4485e0a738f6c443825f4c89dba2d5b0b4b2a6a9728cef46252066f11c019d5621c059f8b8f46
-
SSDEEP
3072:q1i/NU8bOMYcYYcmy51VRgiFCpCIXUWOLTsEsigcL3P6xxc1Vne1i/NU82OMYcYU:Ui/NjO5xbg/CSUFLTwMjs6wi/N+O7
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories
-