General

  • Target

    hcleague-setup-0.1.5.zip

  • Size

    98.4MB

  • Sample

    230413-z5v8nsfg3w

  • MD5

    0a888114d8eeabef33b4c00176e2bebd

  • SHA1

    ec63260a6027b5f988116f8f88fb531ec95d93c1

  • SHA256

    229de03b6c70a57a4f5f37213049342a72a9cee5305b5c5c05d05ea30f8a8563

  • SHA512

    8aac454c5fbb2a241b65cb51091ddc2a1f9da0958712476ff2f13d858178dafedd7828e43a6ce4114bef3adc9a20c4b3c6cf381caefe2acdc22675ec26c1241b

  • SSDEEP

    3145728:M5BzajGi/BPQIVkcQavrjK0bKq38gheETZ/Py4yGVB5:MwBPQIVOav8dKn9Py4yGB

Score
7/10

Malware Config

Targets

    • Target

      hcleague-setup-0.1.5.zip

    • Size

      98.4MB

    • MD5

      0a888114d8eeabef33b4c00176e2bebd

    • SHA1

      ec63260a6027b5f988116f8f88fb531ec95d93c1

    • SHA256

      229de03b6c70a57a4f5f37213049342a72a9cee5305b5c5c05d05ea30f8a8563

    • SHA512

      8aac454c5fbb2a241b65cb51091ddc2a1f9da0958712476ff2f13d858178dafedd7828e43a6ce4114bef3adc9a20c4b3c6cf381caefe2acdc22675ec26c1241b

    • SSDEEP

      3145728:M5BzajGi/BPQIVkcQavrjK0bKq38gheETZ/Py4yGVB5:MwBPQIVOav8dKn9Py4yGB

    Score
    1/10
    • Target

      hcleague-setup-0.1.5.exe

    • Size

      98.4MB

    • MD5

      f681d86f6afec19947101a79fc214d07

    • SHA1

      ee698956295c94d930595ec259cd3c7c2af07205

    • SHA256

      d0f90377fe5f029ecc4f5dcee8299910588f79d36197fa91609d30fe6755d1cd

    • SHA512

      77e0b7c77f7c219ffa99d7b0208b537347fc751cc5213eb68211abb7a45539098a2204695ed12a8ef073ecd91853551ef7cbd9e34db03facc2ad79ca9289be52

    • SSDEEP

      3145728:3jBnVx2snNLMqbfyOaxjBnVx2kgo6B48HxFv6GqeDPo:3fNLMqbPaxaow1Lv6Gqek

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks