General
- Target file.exe
- Size 267KB
- Sample230614-rnf4esaa52
- SHA256 eef51981f7cdb215ed2578d443d27eddbed6dcaa37c568200edfc545b43ec69d
- MD5 d08a460cac4ff3eea6484336953a0d08
- SHA1 662dd7717e21aebe261d44b57842aea44c2c8939
- SHA512 c88ec4c8b5efe86fc14af8ea266986780a4a48030715ced616a1cd857667be7b0b05d4ae414495190ae3065a302b49a603d028257f923579017ab05a48a5d175
- SSDEEP 6144:PYa69YhsG4XwmevagvImdFMtRTNTpPx07s232DglOw:PYHYhs2XIvfTNNPx0rim
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20230220-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20230221-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target file.exe
- Size 267KB
- SHA256 eef51981f7cdb215ed2578d443d27eddbed6dcaa37c568200edfc545b43ec69d
- MD5 d08a460cac4ff3eea6484336953a0d08
- SHA1 662dd7717e21aebe261d44b57842aea44c2c8939
- SHA512 c88ec4c8b5efe86fc14af8ea266986780a4a48030715ced616a1cd857667be7b0b05d4ae414495190ae3065a302b49a603d028257f923579017ab05a48a5d175
- SSDEEP 6144:PYa69YhsG4XwmevagvImdFMtRTNTpPx07s232DglOw:PYHYhs2XIvfTNNPx0rim
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Suspicious use of SetThreadContext