General
-
Target
SpotifySetup.exe
-
Size
724KB
-
Sample
230329-r4hxysac9t
-
MD5
9b5c23d88dc01f2069ce85f1be2e040d
-
SHA1
27239f2ef7a9bf10e47a8eb0d5ff07f8c8244217
-
SHA256
72ba35b22553101499e7aa001251d6b6b5eb645c7e907ebc256545e3ab1d5d83
-
SHA512
2da74acbbcbab15b4dcf30da868aa99e116eaf21071f8a47dfa3f73a026b55baedb8374d6560be3cfc289f5fc6f6f9886b8cedcf0787e1d2a81a5ac20ebb0f06
-
SSDEEP
12288:M4jvnpbgd8+DxjVWAlwJ2yy85QbKIdNWXn6HKTCWl4KjrVR:MenWDxjIf5Q1NWXhlxR
Static task
static1
Behavioral task
behavioral1
Sample
SpotifySetup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SpotifySetup.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
SpotifySetup.exe
-
Size
724KB
-
MD5
9b5c23d88dc01f2069ce85f1be2e040d
-
SHA1
27239f2ef7a9bf10e47a8eb0d5ff07f8c8244217
-
SHA256
72ba35b22553101499e7aa001251d6b6b5eb645c7e907ebc256545e3ab1d5d83
-
SHA512
2da74acbbcbab15b4dcf30da868aa99e116eaf21071f8a47dfa3f73a026b55baedb8374d6560be3cfc289f5fc6f6f9886b8cedcf0787e1d2a81a5ac20ebb0f06
-
SSDEEP
12288:M4jvnpbgd8+DxjVWAlwJ2yy85QbKIdNWXn6HKTCWl4KjrVR:MenWDxjIf5Q1NWXhlxR
Score10/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-