General
- Target Draft copy (2).zip
- Size 265KB
- Sample230211-npfbqsba92
- SHA256 25fa9d230c114a64181127df03fb38e48e1a0bb995149877e56b8f7f8d72675a
- MD5 ac0ac455416e7ae81e77fc98d070fc57
- SHA1 f12e7d3f5ba129bbceab12310faafe6441a874bb
- SHA512 4d4e4ae61c33579b1deb78da5d58bb76e9250331c8587fafca6dc20cb914dcb0135b5b7157b5f5b68db4fa48045362b6c788222a084045bcbb9e32b5d190a0b7
- SSDEEP 6144:vpU8PLkt/zIKzH/OToOR9BnqN7R5yXu0tDaSK5r1Ppkbcp5SAM:lPLkVIqfEoOR95qRRKRQSK5pPscpPM
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Draft copy (2).exe
Resource
win7-20220901-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
Draft copy (2).exe
Resource
win10v2004-20220812-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Draft copy (2).exe
- Size 279KB
- SHA256 c03d796c8b75c36e92aa53d1fb21d89fb0fc6aa57df540ca0074c43661a6cec0
- MD5 081e782e1fa08dc8aba10cb884c28dfd
- SHA1 c29170608c293c89db0fdd51d5e79bbd6c90e644
- SHA512 5445a8dc70c27874e9369c059a0675e17c45348175971d63888560942800b8b4e48749de838ebe3cefeb355cacfa6230bd65ae9ccaa684d9674704dd32c1e3b5
- SSDEEP 6144:DYa6gaQ4zIKz5/OTQOf9BDqN7V5yZuwtFqSK5R1Zpkbcp/Srx:DY+aJIqdEQOf9ZqRVuDiSK5LZscpsx
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext