General
-
Target
Setup.zip
-
Size
2.1MB
-
Sample
230111-z6z81sed83
-
MD5
5b39e28b0224ac0ea04446bc60f7c0c3
-
SHA1
e75daf4d753868e1e9b12588a1ca4877f0f09aaa
-
SHA256
c4ab036b24c5e36e3278fcddc33d1440b0ee5e3d1d67173f37457bb41392172d
-
SHA512
29309d16aa92b3ddc1c1c8a682ee1bd4d54a6b579a0644c6495225a6e0141595e020d294412f82c9d618ae557fbf7602c71fced2d1f2b8c76bf7614bee8b0ad9
-
SSDEEP
49152:UhweAytPah67GkWcEy5vc3BF5zzFikYdb:eRALI7GkWly50RP8kY9
Static task
static1
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
langs/Hungarian.ps1
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
langs/Korean.ps1
Resource
win10-20220812-en
Malware Config
Targets
-
-
Target
Setup.exe
-
Size
449.4MB
-
MD5
f1e33ffde96a062b508d1ab648c3596a
-
SHA1
83f5eeec23d2d4314efc314f4ef0429aa45ec06c
-
SHA256
28e317bf8c269040f37c2243d9ae95596ebb91b2f5f8ef9d394df4aa35cdebbf
-
SHA512
d48a22bdf50330a9e85cce84687676cd7e0f3f7822f0c1dc9bcc3ec68185ce320c0aea8e875f3136cc9626d680deb7e1bc052d0a5ac7cc6f4fee835e937944c7
-
SSDEEP
24576:LfoxBJrYy6ALVSKIKTyoTv4fs+6Cyh/9ZeNI8uo:7oyob4k+6CyhFZeZ
Score5/10-
Suspicious use of SetThreadContext
-
-
-
Target
langs/Hungarian.ini
-
Size
107KB
-
MD5
7591df7fae4342cbc7a0706e1b28e87b
-
SHA1
825e88ad498e8713522f5aef3b21ee01d6fa8b41
-
SHA256
fe9997629d296908247a2e82da6c369e2ea7eb4c87b12fc7c8d3ecb3e6fc320d
-
SHA512
8f58c6fbaf5ea140a3ecbbc88cbf4bdd0e0ba3fbdf169f4b7cb831094a47a6ead103f89fc07748f91d1396ebd13c7ebcc90a316f0eb203ff4c86a50be5cd3ca4
-
SSDEEP
3072:UaKBsDgGod8NAH4iyf8kXrLfKgL6YhL+L3yGU:73X
Score1/10 -
-
-
Target
langs/Korean.ini
-
Size
91KB
-
MD5
efae0c78be2abe2920c78b9d4785ab45
-
SHA1
8c0799fb68852cb071bbe260deb4ab357bd5f4ed
-
SHA256
ad556989f6e4a683d9668e41d2d7175b7b46847c2eef26188b9075fc600d0132
-
SHA512
44737be4d4bd0f93ca3e986c89102612932f3749b8e9b89446a567cff60ceb856b4bd7380da7fe3f1809579e6ec2162d0cdd4a217935a4961c6b36a482dd4ac8
-
SSDEEP
768:wPYhkzQl6qE7rY+xuPAsyKVmq8Ag8lyWqFk5ziCfsg8S+EZNlWJ7lxyBiCWfbMav:HSzQlc7siCmq8AFlBmLfbNA2Nt7osVP
Score1/10 -