General
-
Target
PhraseExpressSetup.exe
-
Size
44.0MB
-
Sample
230331-x5m6yseb4x
-
MD5
43ed00bb6dda0adfcbcaad664a720035
-
SHA1
dfa725377191829e4741f852320c2873298d90b3
-
SHA256
38d1757d0aed68b56449118cbec7e7ad70aacd3589c28bdd6ff28e2df38a23d6
-
SHA512
99579e4ce237b537eb180afa3f0cda1f97885d9e1ad1bf7804d14f4b09e0cdab99a8403ec096d9de42f5138e7b83dc2cae62aa8bde8ec244678720fc410d9364
-
SSDEEP
786432:bUifFJDboMXLloQ1jTkmWD/mhU5KWC44VKkmgJmJ7zhzbj12nKCUUiV:fdJDbdXLlh1PlWDmPUfgJmJXVj8KDZV
Static task
static1
Behavioral task
behavioral1
Sample
PhraseExpressSetup.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
PhraseExpressSetup.exe
-
Size
44.0MB
-
MD5
43ed00bb6dda0adfcbcaad664a720035
-
SHA1
dfa725377191829e4741f852320c2873298d90b3
-
SHA256
38d1757d0aed68b56449118cbec7e7ad70aacd3589c28bdd6ff28e2df38a23d6
-
SHA512
99579e4ce237b537eb180afa3f0cda1f97885d9e1ad1bf7804d14f4b09e0cdab99a8403ec096d9de42f5138e7b83dc2cae62aa8bde8ec244678720fc410d9364
-
SSDEEP
786432:bUifFJDboMXLloQ1jTkmWD/mhU5KWC44VKkmgJmJ7zhzbj12nKCUUiV:fdJDbdXLlh1PlWDmPUfgJmJXVj8KDZV
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-