General
-
Target
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0.exe
-
Size
48KB
-
Sample
241114-dwqqyaxnbl
-
MD5
ddfed188323db74fd120d1321ec7be06
-
SHA1
5840e423a50f62b2d661b1fd367caf2b914d0209
-
SHA256
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0
-
SHA512
9a73b4fda0bf3b4ef369e937adb544af77f620582e55de1f4f6cad4749d6d17b6e5f211907b64b1d70e7d31ba3471537902d26f36e03e7aa96fe8fb220620662
-
SSDEEP
768:vvNH/4N/dM2GaSMSImaMju5d1xjEMs96cyX1869YRLaS:vvNwNVM2GJaMjwd1lMLyXuvRGS
Static task
static1
Behavioral task
behavioral1
Sample
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0.exe
-
Size
48KB
-
MD5
ddfed188323db74fd120d1321ec7be06
-
SHA1
5840e423a50f62b2d661b1fd367caf2b914d0209
-
SHA256
cf0f848f196f80c0e20f769277fd053560e0b245c285a128d7f5a6141f08a4d0
-
SHA512
9a73b4fda0bf3b4ef369e937adb544af77f620582e55de1f4f6cad4749d6d17b6e5f211907b64b1d70e7d31ba3471537902d26f36e03e7aa96fe8fb220620662
-
SSDEEP
768:vvNH/4N/dM2GaSMSImaMju5d1xjEMs96cyX1869YRLaS:vvNwNVM2GJaMjwd1lMLyXuvRGS
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-