Overview

overview

8

Static

static

pokemmo-in...ws.exe

windows7-x64

8

pokemmo-in...ws.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    pokemmo-installer-windows.exe

  • Size

    94.4MB

  • Sample

    230202-dl3yhsgd31

  • MD5

    fa8842bbb0e851d04046e69619de0dca

  • SHA1

    e1507db5c34b5e61b866d8ae6973171f371492a3

  • SHA256

    db19c0673de4b3d9bc079facec628c8e18d408efad85a300b7868b418ac9d822

  • SHA512

    7ec8ba4361f380ebe0bf01557201fc83819e48731883c2feb3895f73cfee8c5555668bf856e8d8f16a6242123a3a6ab6a56472b5bfa00649f6d86e42f4dc7b7a

  • SSDEEP

    1572864:5zSXVaHnWl+UeGWhSes7S2C1NOiLIMt2fjqvOqkAoisocZBjL/ODmIiglrNMN:5ulaHK+UbWhyBCnQOvuisoqFLvI1lqN

Score
8/10
discovery

Malware Config

Targets

    • Target

      pokemmo-installer-windows.exe

    • Size

      94.4MB

    • MD5

      fa8842bbb0e851d04046e69619de0dca

    • SHA1

      e1507db5c34b5e61b866d8ae6973171f371492a3

    • SHA256

      db19c0673de4b3d9bc079facec628c8e18d408efad85a300b7868b418ac9d822

    • SHA512

      7ec8ba4361f380ebe0bf01557201fc83819e48731883c2feb3895f73cfee8c5555668bf856e8d8f16a6242123a3a6ab6a56472b5bfa00649f6d86e42f4dc7b7a

    • SSDEEP

      1572864:5zSXVaHnWl+UeGWhSes7S2C1NOiLIMt2fjqvOqkAoisocZBjL/ODmIiglrNMN:5ulaHK+UbWhyBCnQOvuisoqFLvI1lqN

    Score
    8/10
    discovery

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks