General
-
Target
Poppy Playtime Chapter 2.exe
-
Size
39.6MB
-
Sample
230331-ympgqsec8s
-
MD5
6fa0bae386792e0d611be8645da59bc1
-
SHA1
dce2f1d8b0b5a61888cd38f1fe45bf2744b72294
-
SHA256
aab8daa28c24b51180e2a5ff0b248df5aa32223926c343ad31c9cdcea53a59d2
-
SHA512
59b92f157e3b479a386128658c8ce7779dd3598ba4aaab424f07d0b15f17f1324e0562dd78a847d60ef6655c041ab996e71df5b49ab0d1286c076425535dc720
-
SSDEEP
786432:PnH60LGTVMaIHuu7USb6DoQingfKnPrN2MmUAOoZ0PMXDuQshj2S+kB0XiER:v6wGTmtH+OxngfKnPB2MmUw0PMSQ++kY
Static task
static1
Behavioral task
behavioral1
Sample
Poppy Playtime Chapter 2.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Poppy Playtime Chapter 2.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Poppy Playtime Chapter 2.exe
-
Size
39.6MB
-
MD5
6fa0bae386792e0d611be8645da59bc1
-
SHA1
dce2f1d8b0b5a61888cd38f1fe45bf2744b72294
-
SHA256
aab8daa28c24b51180e2a5ff0b248df5aa32223926c343ad31c9cdcea53a59d2
-
SHA512
59b92f157e3b479a386128658c8ce7779dd3598ba4aaab424f07d0b15f17f1324e0562dd78a847d60ef6655c041ab996e71df5b49ab0d1286c076425535dc720
-
SSDEEP
786432:PnH60LGTVMaIHuu7USb6DoQingfKnPrN2MmUAOoZ0PMXDuQshj2S+kB0XiER:v6wGTmtH+OxngfKnPB2MmUw0PMSQ++kY
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-