General
- Target 44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2N.exe
- Size 522KB
- Sample241113-vsbahsweqm
- SHA256 44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2
- MD5 68b0b020dc2dffbdbd18c34c00af8230
- SHA1 eb79e07e0e7beccc15a25767cb263a2e4fd300a8
- SHA512 88545475878c300c2e07ef78f0924c6a90cea8ad3014cfce67d82f9432210df8c92466a1f7ec7683b3bc294b16575f2db5cfafc848b3518db85c7df07728b9c2
- SSDEEP 12288:X6FXmYLAYHEKYwEKEKMYMYYYFvYEYH5HrH5l7H5WH5lH5lH5WH:X6IYLAYHEKYwEKEKMYMYYYFvYEYH5Hr3
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2N.exe
Resource
win7-20240903-en
11 signatures
120 seconds
Behavioral task
behavioral2
Sample
44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2N.exe
Resource
win10v2004-20241007-en
10 signatures
120 seconds
Malware Config
Targets
-
- Target 44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2N.exe
- Size 522KB
- SHA256 44a85921cd06e2a745a86fe8f399af2e36e70d2a24a686036ee5687577ed67c2
- MD5 68b0b020dc2dffbdbd18c34c00af8230
- SHA1 eb79e07e0e7beccc15a25767cb263a2e4fd300a8
- SHA512 88545475878c300c2e07ef78f0924c6a90cea8ad3014cfce67d82f9432210df8c92466a1f7ec7683b3bc294b16575f2db5cfafc848b3518db85c7df07728b9c2
- SSDEEP 12288:X6FXmYLAYHEKYwEKEKMYMYYYFvYEYH5HrH5l7H5WH5lH5lH5WH:X6IYLAYHEKYwEKEKMYMYYYFvYEYH5Hr3
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory