General
-
Target
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe
-
Size
137KB
-
Sample
241117-lhsx5swlht
-
MD5
a7559ff8dbc7d7d65d11f8a98df582f0
-
SHA1
7abe85b1abbc907ae0466bf2b9e9321ed310fede
-
SHA256
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4a
-
SHA512
f8a9e2d14cfae37dd2179dcde4649384f6006ea2223df771797e3757a4391269b529a64f6f2dee9e319db8acb95f8108365aee99a9c7df29fbef31f3945445d5
-
SSDEEP
3072:S1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU8T:Mi/NjO5x0Xg+UGSYnuy3Oai/Nr
Static task
static1
Behavioral task
behavioral1
Sample
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4aN.exe
-
Size
137KB
-
MD5
a7559ff8dbc7d7d65d11f8a98df582f0
-
SHA1
7abe85b1abbc907ae0466bf2b9e9321ed310fede
-
SHA256
e776aeaf17eb96ee53e371b1cd25f50071b05bbff9b4f79d603145089f4ace4a
-
SHA512
f8a9e2d14cfae37dd2179dcde4649384f6006ea2223df771797e3757a4391269b529a64f6f2dee9e319db8acb95f8108365aee99a9c7df29fbef31f3945445d5
-
SSDEEP
3072:S1i/NU8bOMYcYYcmy5d048g3nan3vx9kGSYng7+s5YmMOMYcYY51i/NU8T:Mi/NjO5x0Xg+UGSYnuy3Oai/Nr
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Indicator Removal: File Deletion
Adversaries may delete files left behind by the actions of their intrusion activity.
-
Drops file in System32 directory
-
Hide Artifacts: Hidden Files and Directories
-