General
- Target cd7a3f289a14e43845e9a5c2746e857d65392b341f47bc3f4acec789d040514c
- Size 76KB
- Sample260830-ze8q3sdb43
- SHA256 cd7a3f289a14e43845e9a5c2746e857d65392b341f47bc3f4acec789d040514c
- MD5 66f81735a1aa0fe3922c1cf3fa109e4e
- SHA1 4821cac3fbbfe2b64b6a2bbb094ba66ffac0aa48
- SHA512 fca5bde2c3357dd4268bd9199dd8d8b65112508fae0a5153b56d1b6ab6424710b6eee336ba14b272d9d2dc785b3a30db0661412d332b56e3b870bf6efb709c66
- SSDEEP 1536:8idlOpARlc+o3Kef6b4BqnjmNHp0NHJazt+ZtRg:bdguTfbNnywNHJaRsg
- TLSH T15073E612FB795DE0EE5E56B220B653955727B9A01A130F93730632AD1CD3BE14C2FB82
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target cd7a3f289a14e43845e9a5c2746e857d65392b341f47bc3f4acec789d040514c
- Size 76KB
- SHA256 cd7a3f289a14e43845e9a5c2746e857d65392b341f47bc3f4acec789d040514c
- MD5 66f81735a1aa0fe3922c1cf3fa109e4e
- SHA1 4821cac3fbbfe2b64b6a2bbb094ba66ffac0aa48
- SHA512 fca5bde2c3357dd4268bd9199dd8d8b65112508fae0a5153b56d1b6ab6424710b6eee336ba14b272d9d2dc785b3a30db0661412d332b56e3b870bf6efb709c66
- SSDEEP 1536:8idlOpARlc+o3Kef6b4BqnjmNHp0NHJazt+ZtRg:bdguTfbNnywNHJaRsg
- TLSH T15073E612FB795DE0EE5E56B220B653955727B9A01A130F93730632AD1CD3BE14C2FB82
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.