General
-
Target
reshacker_setup.exe
-
Size
4.0MB
-
Sample
220923-hkcr6adde3
-
MD5
e846ef7353af351ad4a6e1d49638b500
-
SHA1
c08392c797fcea5147b3f0d7e07f57eedc323911
-
SHA256
080e97f7c198aeeac2a172f055c09d8da365b59b58bf6a71bde4486d9992ff66
-
SHA512
e73bd521a157af4388b7c0d3bff5b34a4a547b8083137a4b48d0c232562d5932c7bb89b6700778246b895d7b9d1ba59050f3a631dfd436f64b5ff9ecf7934ec5
-
SSDEEP
98304:HEnF3qBlk/aDK9b0SVtlOMKTNdSLUHBrICc:y3KkyDgQSVKMKTeIHA
Static task
static1
Behavioral task
behavioral1
Sample
reshacker_setup.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
reshacker_setup.exe
-
Size
4.0MB
-
MD5
e846ef7353af351ad4a6e1d49638b500
-
SHA1
c08392c797fcea5147b3f0d7e07f57eedc323911
-
SHA256
080e97f7c198aeeac2a172f055c09d8da365b59b58bf6a71bde4486d9992ff66
-
SHA512
e73bd521a157af4388b7c0d3bff5b34a4a547b8083137a4b48d0c232562d5932c7bb89b6700778246b895d7b9d1ba59050f3a631dfd436f64b5ff9ecf7934ec5
-
SSDEEP
98304:HEnF3qBlk/aDK9b0SVtlOMKTNdSLUHBrICc:y3KkyDgQSVKMKTeIHA
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-