General
-
Target
setup_wipe.exe
-
Size
6.3MB
-
Sample
230102-2wj56agd82
-
MD5
6ecbef662a58fa79898c64dfe4aec8b0
-
SHA1
27f6facacf26773974f8a6a2c4fb929439d68c63
-
SHA256
cb6a28f6848acc465fb118c2379cccf86f4605eb8d51f418d2c9e691a2679bd2
-
SHA512
47e367ead641ef6c1f0ec28c715d70e257f3183e12a4d96f3cac61a0bcfa0e1de52c737d4c432f0c3ec993604ef5fdba9d186b3e52da29b8ce95210cc3e43a59
-
SSDEEP
98304:dktDam/Y6kgSRo5e6n0rCq7oF7ftzTACeDC+X0aj008fmMMN3S1cn/b73:u8AI9Rw02+oF7lzMCeDCTvYN7P3
Static task
static1
Behavioral task
behavioral1
Sample
setup_wipe.exe
Resource
win7-20220812-es
Behavioral task
behavioral2
Sample
setup_wipe.exe
Resource
win10v2004-20221111-es
Malware Config
Targets
-
-
Target
setup_wipe.exe
-
Size
6.3MB
-
MD5
6ecbef662a58fa79898c64dfe4aec8b0
-
SHA1
27f6facacf26773974f8a6a2c4fb929439d68c63
-
SHA256
cb6a28f6848acc465fb118c2379cccf86f4605eb8d51f418d2c9e691a2679bd2
-
SHA512
47e367ead641ef6c1f0ec28c715d70e257f3183e12a4d96f3cac61a0bcfa0e1de52c737d4c432f0c3ec993604ef5fdba9d186b3e52da29b8ce95210cc3e43a59
-
SSDEEP
98304:dktDam/Y6kgSRo5e6n0rCq7oF7ftzTACeDC+X0aj008fmMMN3S1cn/b73:u8AI9Rw02+oF7lzMCeDCTvYN7P3
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-