General
-
Target
PicoTorrent-0.25.0-x64.exe
-
Size
5.7MB
-
Sample
230204-r5v9nsgh6y
-
MD5
d665e9afbe4d8aac93ed80e3d9167ab5
-
SHA1
732e0fc16a7212535e9b8ae241186efc8839680f
-
SHA256
3b034ac4eff0fc296634c27c8b41b2629d57284a4bb1e366150fd04cfa23d801
-
SHA512
30f66bb0799c7ddd09c8a609add6496cf454f57bc94a911cf44fb78a073d2518e6088c888c143fa98172c4a0bf66e78ee588a74d84c3fb859603b6923291ae01
-
SSDEEP
98304:uT0ap+fVbw3/89LT477CFoQFYS5qgqGU0yJIlr+oV+gMu4MfRcIMf:uTl+fV8v89L+CDTqeprfVku4MfRcIW
Static task
static1
Behavioral task
behavioral1
Sample
PicoTorrent-0.25.0-x64.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
PicoTorrent-0.25.0-x64.exe
-
Size
5.7MB
-
MD5
d665e9afbe4d8aac93ed80e3d9167ab5
-
SHA1
732e0fc16a7212535e9b8ae241186efc8839680f
-
SHA256
3b034ac4eff0fc296634c27c8b41b2629d57284a4bb1e366150fd04cfa23d801
-
SHA512
30f66bb0799c7ddd09c8a609add6496cf454f57bc94a911cf44fb78a073d2518e6088c888c143fa98172c4a0bf66e78ee588a74d84c3fb859603b6923291ae01
-
SSDEEP
98304:uT0ap+fVbw3/89LT477CFoQFYS5qgqGU0yJIlr+oV+gMu4MfRcIMf:uTl+fV8v89L+CDTqeprfVku4MfRcIW
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-