General
-
Target
HFlashPlayer-windows-0.1.1.zip
-
Size
6.4MB
-
Sample
230302-2zjzkafb98
-
MD5
329c7ae58c7ae013be494462a69bc7a1
-
SHA1
7fe7caf51d94fae6e6187073151366ef19a7231c
-
SHA256
2c341e9ae196b1bcb137a43be29251e93561f9d578b08d2863529585039e885b
-
SHA512
24bd8262909d03ddeb8108b04a8b0bf8012be60080294e761d12fc2bb4555ba53cf0000823d828eeb56f7b9237dc1295482764b539f91fbcb5150658ced01689
-
SSDEEP
196608:MzHDxzzcsrwzmxP1khXTELnUZD5imvX3kLy01a:MHlcsrc+65EMEmPUyOa
Behavioral task
behavioral1
Sample
HFlashPlayer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
HFlashPlayer.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
flashplayer.exe
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
flashplayer.exe
Resource
win10v2004-20230221-en
Malware Config
Targets
-
-
Target
HFlashPlayer.exe
-
Size
33KB
-
MD5
6c52eb6343505125e91b788d603c7a39
-
SHA1
7112987259eb367d016e911a2d0afc94c31a0fcf
-
SHA256
05d59d0257868942f418f826695cfb3907ea0bc27df9885657526c376b8ec03f
-
SHA512
227b1ace54100864cb0bdcf58fe7e9edcf45c1d45048729383ec3e887f729c80422da289ea05a8eaaa048e2c542088012609aaed53dd5d345a4f11432a5e0cb8
-
SSDEEP
768:TPprSjI6nXqIpQ9ka3JK6nXqIpQ9kalJy:TxX0XqIi3E0XqIilM
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
-
-
Target
flashplayer.exe
-
Size
15.3MB
-
MD5
a8a8c089a6a8583b24c85f5a4a41f5ac
-
SHA1
798c755fab62d9fc7019bd195026195d0d339a38
-
SHA256
b6ba115c2b43d87aaddf0060c44726e7af1a12c9501fc63de652a9517d7367db
-
SHA512
1636318338ae3eeb2d194e62463b279f9ff86e22e119ac6bb134d8ec958a69930815b6f84b9019342b62c470020465d3288bb592676318902e6cb765029d2f2f
-
SSDEEP
393216:e+VtcTsNLwevhv3aDtxf0mAPXXprADug+js0+oEbiNO0TNPRU70hlz:e4tcCLwevhHPXXprADuO8PRUQht
Score6/10-
Adds Run key to start application
-