General
-
Target
ADE_4.5_Installer.exe
-
Size
8.6MB
-
Sample
230320-2bsxkahf4v
-
MD5
1efcd0c92784169fc1eec4e87788f6e8
-
SHA1
585e9eb828859ec005a5c280ff99408e65df1cb8
-
SHA256
a21a9d5389728fdac6a7288953dddeea774ef2bee07f1caf7ea20bbed8f5a2c6
-
SHA512
96353fa0dfba41c13f8742aac480dc14484107a285edf5c2d6e191c7f39fe3c78ccb68c226fbecd566fcd11561145c6dfdc187264d6d36959917eea3e0d1b5b9
-
SSDEEP
196608:/MUfuaC/K12qiyD6dmS/qY2fvYG2zZ8igA7Tt:EUWaK8iU6AsevY9ZUKt
Static task
static1
Behavioral task
behavioral1
Sample
ADE_4.5_Installer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ADE_4.5_Installer.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
ADE_4.5_Installer.exe
-
Size
8.6MB
-
MD5
1efcd0c92784169fc1eec4e87788f6e8
-
SHA1
585e9eb828859ec005a5c280ff99408e65df1cb8
-
SHA256
a21a9d5389728fdac6a7288953dddeea774ef2bee07f1caf7ea20bbed8f5a2c6
-
SHA512
96353fa0dfba41c13f8742aac480dc14484107a285edf5c2d6e191c7f39fe3c78ccb68c226fbecd566fcd11561145c6dfdc187264d6d36959917eea3e0d1b5b9
-
SSDEEP
196608:/MUfuaC/K12qiyD6dmS/qY2fvYG2zZ8igA7Tt:EUWaK8iU6AsevY9ZUKt
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-