General
- Target Ultima_Multihack.exe
- Size 6.4MB
- Sample220703-pq62hsfcdn
- SHA256 b3847c94d840dd53c3ba7248734424f06715deacf6dd6ebb727c2f1a7de4c945
- MD5 a2f01be6e514a6cd3424f9762f2c5b02
- SHA1 1553dd3e3556f2c82ab312659d5184952d0b9a4e
- SHA512 fa9dd15980bd80bcd250a1ac990281824f822635b8d3bb7d1d1a78958c8ec084e775735c3c14c09337076c3f4fe1185cd06cfb4cd989fcc0be78bd99c577e616
- MD5 SHA1 SHA512
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Ultima_Multihack.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Ultima_Multihack.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
Malware Config
Targets
-
- Target Ultima_Multihack.exe
- Size 6.4MB
- SHA256 b3847c94d840dd53c3ba7248734424f06715deacf6dd6ebb727c2f1a7de4c945
- MD5 a2f01be6e514a6cd3424f9762f2c5b02
- SHA1 1553dd3e3556f2c82ab312659d5184952d0b9a4e
- SHA512 fa9dd15980bd80bcd250a1ac990281824f822635b8d3bb7d1d1a78958c8ec084e775735c3c14c09337076c3f4fe1185cd06cfb4cd989fcc0be78bd99c577e616
- MD5 SHA1 SHA512
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL