General
- Target 01.exe
- Size 108KB
- Sample220309-pff3cabcbq
- SHA256 686d56d6a2903bf7b2f9710f308046a91f5f9082db14a7470f93a59e9939ec4c
- MD5 829775bde5f5559e2948224d8a4e5ef9
- SHA1 6630a7aaafcb5bc47240ebdbb4233abf5f353ca8
- SHA512 6941bdc72c90c928d7d0f20350154fd5c4fbe750f3b6420e6d70944a79882dd8349c6bc7ae51df318e881a33b8987de159602f5f7c7c65438734d5073dbf26a7
- MD5 SHA1 SHA512
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
01.exe
Resource
win7-20220223-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
01.exe
Resource
win10v2004-en-20220113
0 signatures
0 seconds
Malware Config
Targets
-
- Target 01.exe
- Size 108KB
- SHA256 686d56d6a2903bf7b2f9710f308046a91f5f9082db14a7470f93a59e9939ec4c
- MD5 829775bde5f5559e2948224d8a4e5ef9
- SHA1 6630a7aaafcb5bc47240ebdbb4233abf5f353ca8
- SHA512 6941bdc72c90c928d7d0f20350154fd5c4fbe750f3b6420e6d70944a79882dd8349c6bc7ae51df318e881a33b8987de159602f5f7c7c65438734d5073dbf26a7
- MD5 SHA1 SHA512
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Suspicious use of SetThreadContext