General
- Target 2019-wuhan-coronavirus-data
- Size 299KB
- Sample260827-mfj3wsshle
- SHA256 3aa42619adaf09f4634b7cd58a4e3532ddcb66e1aef2673069557ac90ff50c24
- MD5 9e7c2914075db26ace512f135aa3c56a
- SHA1 6956e30fd8f2fb1390cbc924656e4d88e522d395
- SHA512 7ff53b9df1d6968aa4af54e2711670cc6225f086e59c6324a60ef36ef68fd0804159b19caab29645b72a1de8a0bd1fe7c641e37cda837114ecfddecfa955700f
- SSDEEP 6144:XuFUPqSaM7k9UREMj82NitCvWdpwmOJ4XP2RcrPyGjY0c4no+sEuQoPLUvS9pl8M:eFUPqSaM72UREMj82NitCvWdpwmOJ4XU
- TLSH T12664E6B1B071D23E068F529AF471AB54E397B69BD716A8E2C43FC2A881C3C84F793155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
2019-wuhan-coronavirus-data.html
Resource
win10v2004-20260513-en
20 signatures
900 seconds
Behavioral task
behavioral2
Sample
2019-wuhan-coronavirus-data.html
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target 2019-wuhan-coronavirus-data
- Size 299KB
- SHA256 3aa42619adaf09f4634b7cd58a4e3532ddcb66e1aef2673069557ac90ff50c24
- MD5 9e7c2914075db26ace512f135aa3c56a
- SHA1 6956e30fd8f2fb1390cbc924656e4d88e522d395
- SHA512 7ff53b9df1d6968aa4af54e2711670cc6225f086e59c6324a60ef36ef68fd0804159b19caab29645b72a1de8a0bd1fe7c641e37cda837114ecfddecfa955700f
- SSDEEP 6144:XuFUPqSaM7k9UREMj82NitCvWdpwmOJ4XP2RcrPyGjY0c4no+sEuQoPLUvS9pl8M:eFUPqSaM72UREMj82NitCvWdpwmOJ4XU
- TLSH T12664E6B1B071D23E068F529AF471AB54E397B69BD716A8E2C43FC2A881C3C84F793155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Checks system information in the registry
System information is often read in order to detect sandboxing environments.