63332c8e87b6a453ba1f106db115206198ba68bbe7b425a0db3b52050292ebbb

General

Target
ObedienceEXE 1.0.0.exe
Size 92.4MB
Sample260708-tb2kpsb16j
SHA256 63332c8e87b6a453ba1f106db115206198ba68bbe7b425a0db3b52050292ebbb
MD5 7952cc671e84cb0f7191a8d4edb5817f
SHA1 dc0662be8107d1e4d61f0daece08a7d379b45d9c
SHA512 83702ce273988dc8032172d45fd64e9490ab1699e5feb50f9ae6f38379815d02dfccd2222a12de0ab8b9013f7f4159de5cd074f887c8aa809bfc2574e9d7fc29
SSDEEP 1572864:+e4hdV6xf/dsT6QfjPemScOt0HfawynQ3Y9GF0J2/3M4fvHLTku43/rNzOp607:+e4Doxf/29fjemScOtusI/0A/3/vHL9L
TLSH
T1DC283327A93C8A7FC1D533FED93770AA8007488E1548D0A4B26FF59D1978A564F3268F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  ObedienceEXE 1.0.0.exe
- Size 92.4MB
- SHA256 63332c8e87b6a453ba1f106db115206198ba68bbe7b425a0db3b52050292ebbb
- MD5 7952cc671e84cb0f7191a8d4edb5817f
- SHA1 dc0662be8107d1e4d61f0daece08a7d379b45d9c
- SHA512 83702ce273988dc8032172d45fd64e9490ab1699e5feb50f9ae6f38379815d02dfccd2222a12de0ab8b9013f7f4159de5cd074f887c8aa809bfc2574e9d7fc29
- SSDEEP 1572864:+e4hdV6xf/dsT6QfjPemScOt0HfawynQ3Y9GF0J2/3M4fvHLTku43/rNzOp607:+e4Doxf/29fjemScOtusI/0A/3/vHL9L
- TLSH
  T1DC283327A93C8A7FC1D533FED93770AA8007488E1548D0A4B26FF59D1978A564F3268F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
behavioral1 behavioral2
- Target
  ObedienceEXE.exe
- Size 168.7MB
- SHA256 c5eee238ec74952f3a299b9520faf1dac7b0a78f101ee9831c6e3d625f819303
- MD5 907cfe6bbd5f42cbcdcc0c05f52e153a
- SHA1 3ac597fd8d63f3942474aba7b7477c8a04333b0c
- SHA512 30241cc56a58c3071640618b83001b89dcd37f85e7c46aeac156ea4ae2ac33e4e31e7beee1e56ed5165283acf7038e8a61ca87b0ea2be23ddb1f0ccf6dbb4f59
- SSDEEP 1572864:eOhiqBPiJU33xaD1gWcdcMPEDCNCgDX0Bf+NNvTPQYhl49RIuKj53fHcTLNKJF96:YgmeNxNNZxqV
- TLSH
  T157887B13F29651D8F09DD1B18B578236EA72B8460738A6DF2754172A2F77FE02B39B10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  resources/elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH
  T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6