General
- Target US2TZfFlHhqVLSN.exe
- Size 685KB
- Sample230919-twdpdace54
- SHA256 d47ffa12778a36d3282598931fbd4614b0215ba1643a59dfdb7e80d8fffa5ead
- MD5 b466d0d13ad453ad5b5484970b985a47
- SHA1 bee2493e564e52d70ef239e45f16adf81f8269eb
- SHA512 a59cf55ffc41a3b1e8f23f1be4a4478bc62c9656013ddde00bc32325b4a95b2bea36e4469237e614c614898be82a1aab3dc57ba54f90d144838375c8a3003cb3
- SSDEEP 12288:op+f4mfJw1Ubv41BCGJzLux0JCp+cwSrtZ0oqtH9fJ:+gBwREGJfOnpJFqbB
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
US2TZfFlHhqVLSN.exe
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
US2TZfFlHhqVLSN.exe
Resource
win10v2004-20230915-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target US2TZfFlHhqVLSN.exe
- Size 685KB
- SHA256 d47ffa12778a36d3282598931fbd4614b0215ba1643a59dfdb7e80d8fffa5ead
- MD5 b466d0d13ad453ad5b5484970b985a47
- SHA1 bee2493e564e52d70ef239e45f16adf81f8269eb
- SHA512 a59cf55ffc41a3b1e8f23f1be4a4478bc62c9656013ddde00bc32325b4a95b2bea36e4469237e614c614898be82a1aab3dc57ba54f90d144838375c8a3003cb3
- SSDEEP 12288:op+f4mfJw1Ubv41BCGJzLux0JCp+cwSrtZ0oqtH9fJ:+gBwREGJfOnpJFqbB
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of SetThreadContext