Overview

overview

8

Static

static

TL_Install...cy.exe

windows7-x64

8

TL_Install...cy.exe

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TL_Installer_legacy.exe

  • Size

    115.1MB

  • Sample

    221230-f1h8rsfa48

  • MD5

    a1df83db3ac9856af4541c2c8641dce3

  • SHA1

    5fea76b7954eedf2df81ea10d888fab62994813d

  • SHA256

    5bd9961365c198adccc1cd1bf89c9a86bcb4c4e02144878b443a87ba9324370c

  • SHA512

    d70b90ed7cf6349cd8e0534ba47f000461180245e6480217d8c149239a5962f3db726654f5c248250a0bbff86fbd2ae79889d393742acb0ce8af077956851e1c

  • SSDEEP

    3145728:su0d/f07Lhq7sggz2l40chBXBRmu2QZ0F:s9Bs5xg02l40aRmu2QK

Score
8/10
discovery

Malware Config

Targets

    • Target

      TL_Installer_legacy.exe

    • Size

      115.1MB

    • MD5

      a1df83db3ac9856af4541c2c8641dce3

    • SHA1

      5fea76b7954eedf2df81ea10d888fab62994813d

    • SHA256

      5bd9961365c198adccc1cd1bf89c9a86bcb4c4e02144878b443a87ba9324370c

    • SHA512

      d70b90ed7cf6349cd8e0534ba47f000461180245e6480217d8c149239a5962f3db726654f5c248250a0bbff86fbd2ae79889d393742acb0ce8af077956851e1c

    • SSDEEP

      3145728:su0d/f07Lhq7sggz2l40chBXBRmu2QZ0F:s9Bs5xg02l40aRmu2QK

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks