General

  • Target

    TL_Installer_legacy.exe

  • Size

    115.1MB

  • Sample

    230204-m4ne8agd9v

  • MD5

    424b7b959c08863951b6a33998003808

  • SHA1

    0a2771d1d457d217a802b24f3aa238be99de9283

  • SHA256

    33007c58c0c9819acfb58ce1ee8674448b3c40d08c9dea9c0180e79a4c372c3d

  • SHA512

    61d0025a1a12ba67fa4b142c58eb1ee9f2707fbbfe63a194a13392e91ee0c6a2fcb3012b8fc5acee8dc8e7b21992576e3914da0da9bed5cf518bdde34d222504

  • SSDEEP

    3145728:/u0d/f07Lhq7sggz2l40chBXBRmu2QZ08:/9Bs5xg02l40aRmu2QN

Score
7/10

Malware Config

Targets

    • Target

      TL_Installer_legacy.exe

    • Size

      115.1MB

    • MD5

      424b7b959c08863951b6a33998003808

    • SHA1

      0a2771d1d457d217a802b24f3aa238be99de9283

    • SHA256

      33007c58c0c9819acfb58ce1ee8674448b3c40d08c9dea9c0180e79a4c372c3d

    • SHA512

      61d0025a1a12ba67fa4b142c58eb1ee9f2707fbbfe63a194a13392e91ee0c6a2fcb3012b8fc5acee8dc8e7b21992576e3914da0da9bed5cf518bdde34d222504

    • SSDEEP

      3145728:/u0d/f07Lhq7sggz2l40chBXBRmu2QZ08:/9Bs5xg02l40aRmu2QN

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks