General
- Target ERROR422.exe
- Size 10.4MB
- Sample260808-xykggstbjd
- SHA256 c1d06468a2f089b4f6efbd51f4a140be40283e2efc76d25712e63471bca9f235
- MD5 c15722d1f29b28fefac3a34c1d1a296a
- SHA1 cf775816f832f08a024de89c96eb9311ef2a66c5
- SHA512 11618e411a8c55eb0a6f7cea0a0c0a70c5df521652cadc09339d43dffcdb7da15155adb8d42bf8a214f542382f01c29086fb14258ea5eab91bb2335474a070ad
- SSDEEP 196608:SoCIRHixqAPLu63SXYGXZJR3RSivHiW2VIfjZOlQoke6LOZBoA/wZaKWX:SnAiqAjyTl3jvCPmj8eokeQ4/EabX
- TLSH T1B2B6336BA5A350B0F1E5AB7C9C0BAFF9A97F9E646C70D407ADD06F055EB45C200E8381
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target ERROR422.exe
- Size 10.4MB
- SHA256 c1d06468a2f089b4f6efbd51f4a140be40283e2efc76d25712e63471bca9f235
- MD5 c15722d1f29b28fefac3a34c1d1a296a
- SHA1 cf775816f832f08a024de89c96eb9311ef2a66c5
- SHA512 11618e411a8c55eb0a6f7cea0a0c0a70c5df521652cadc09339d43dffcdb7da15155adb8d42bf8a214f542382f01c29086fb14258ea5eab91bb2335474a070ad
- SSDEEP 196608:SoCIRHixqAPLu63SXYGXZJR3RSivHiW2VIfjZOlQoke6LOZBoA/wZaKWX:SnAiqAjyTl3jvCPmj8eokeQ4/EabX
- TLSH T1B2B6336BA5A350B0F1E5AB7C9C0BAFF9A97F9E646C70D407ADD06F055EB45C200E8381
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL