General
-
Target
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d
-
Size
2.0MB
-
Sample
240701-dl3bzsxfqr
-
MD5
f6a39df720e52bc775b348c6e839d8e6
-
SHA1
7d38d710c72c769bc4d5269c495d343f6eafb2d6
-
SHA256
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d
-
SHA512
8218adc8f97f87d6f11d3f5a26ae036deca158902e0c01dbbd276a39b3d3c84744c8c9457e952a74ca5a6e196ef132e6b566d6435015f2cb4473ac700622d963
-
SSDEEP
49152:hIRDVAGcivh7blLAy9ACr7zo9yLXxZiK4jBZ:E0iZnlLAYACr7E+XvN4jL
Static task
static1
Behavioral task
behavioral1
Sample
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d
-
Size
2.0MB
-
MD5
f6a39df720e52bc775b348c6e839d8e6
-
SHA1
7d38d710c72c769bc4d5269c495d343f6eafb2d6
-
SHA256
d36a9aaa9c550197c1ed124c84de9521610d316e790aeb08f56c8bbd33dc535d
-
SHA512
8218adc8f97f87d6f11d3f5a26ae036deca158902e0c01dbbd276a39b3d3c84744c8c9457e952a74ca5a6e196ef132e6b566d6435015f2cb4473ac700622d963
-
SSDEEP
49152:hIRDVAGcivh7blLAy9ACr7zo9yLXxZiK4jBZ:E0iZnlLAYACr7E+XvN4jL
Score9/10-
Detects executables containing possible sandbox analysis VM usernames
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-