General
-
Target
TL_Installer_legacy.exe
-
Size
115.1MB
-
Sample
230204-m4ne8agd9v
-
MD5
424b7b959c08863951b6a33998003808
-
SHA1
0a2771d1d457d217a802b24f3aa238be99de9283
-
SHA256
33007c58c0c9819acfb58ce1ee8674448b3c40d08c9dea9c0180e79a4c372c3d
-
SHA512
61d0025a1a12ba67fa4b142c58eb1ee9f2707fbbfe63a194a13392e91ee0c6a2fcb3012b8fc5acee8dc8e7b21992576e3914da0da9bed5cf518bdde34d222504
-
SSDEEP
3145728:/u0d/f07Lhq7sggz2l40chBXBRmu2QZ08:/9Bs5xg02l40aRmu2QN
Static task
static1
Behavioral task
behavioral1
Sample
TL_Installer_legacy.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
TL_Installer_legacy.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
TL_Installer_legacy.exe
-
Size
115.1MB
-
MD5
424b7b959c08863951b6a33998003808
-
SHA1
0a2771d1d457d217a802b24f3aa238be99de9283
-
SHA256
33007c58c0c9819acfb58ce1ee8674448b3c40d08c9dea9c0180e79a4c372c3d
-
SHA512
61d0025a1a12ba67fa4b142c58eb1ee9f2707fbbfe63a194a13392e91ee0c6a2fcb3012b8fc5acee8dc8e7b21992576e3914da0da9bed5cf518bdde34d222504
-
SSDEEP
3145728:/u0d/f07Lhq7sggz2l40chBXBRmu2QZ08:/9Bs5xg02l40aRmu2QN
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-