General
-
Target
Postman-win64-Setup.exe
-
Size
146.8MB
-
Sample
221027-lz9xzsbgc8
-
MD5
f547ce65e9124da706dd918da769af60
-
SHA1
71ae19843de2d5563e96a3a031b05d132b2a3109
-
SHA256
aeb60f26cfbe23cd23586219a445f030ec3bc989993d9d4b0dd9110319d5d966
-
SHA512
3d4f81265a087281be6919700e03aeeef3ca4b8c411728e8dba31f5394c08600677badb77f0baa4607ef5deb079c4442bcc72a9e956ee7f16a03f57b07cc49ef
-
SSDEEP
3145728:TmxSGbzLnsCBxjzZqYZTE8hTCmwGldB7ux0Yie9RD773V5z+dwLl:aLsoNZZZTFTCQldB7Y0Nen/Fppp
Static task
static1
Behavioral task
behavioral1
Sample
Postman-win64-Setup.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Postman-win64-Setup.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
Postman-win64-Setup.exe
-
Size
146.8MB
-
MD5
f547ce65e9124da706dd918da769af60
-
SHA1
71ae19843de2d5563e96a3a031b05d132b2a3109
-
SHA256
aeb60f26cfbe23cd23586219a445f030ec3bc989993d9d4b0dd9110319d5d966
-
SHA512
3d4f81265a087281be6919700e03aeeef3ca4b8c411728e8dba31f5394c08600677badb77f0baa4607ef5deb079c4442bcc72a9e956ee7f16a03f57b07cc49ef
-
SSDEEP
3145728:TmxSGbzLnsCBxjzZqYZTE8hTCmwGldB7ux0Yie9RD773V5z+dwLl:aLsoNZZZTFTCQldB7Y0Nen/Fppp
Score8/10-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-