General
- Target Exclusive!!.exe
- Size 3.4MB
- Sample260811-v3tvlsvtas
- SHA256 96a2b01a2ab913693d9faca4d8e179036c3e1f4cc0e5d1fd53a1f8645e28f239
Score
8/10
Malware Config
Targets
-
- Target Exclusive!!.exe
- Size 3.4MB
- SHA256 96a2b01a2ab913693d9faca4d8e179036c3e1f4cc0e5d1fd53a1f8645e28f239
Score8/10-
Downloads MZ/PE file
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target costura.dll
- Size 5KB
- SHA256 6771700a3bbd39251648d73bae181c3a4fa978ac40cccf4d5e2ac7815f18b406
Score1/10 -
- Target costura.pdb
- Size 7KB
- SHA256 4675077d1bcf2a5f380521ef624a03fee29e13310d39c80223c5e6d889a12ba2
Score3/10 -
- Target guna.ui2.dll
- Size 2.1MB
- SHA256 bae60184a9514418d6a442549d2de35dcd753a79b7b57c018946fe8790f654cd
Score1/10