General
-
Target
SPORE (Steam) Trainer Setup.exe
-
Size
141KB
-
Sample
230430-vsq1zacb91
-
MD5
0e029f4e50575af65f13c6cc9bf36c62
-
SHA1
9e3e2a3817d55f100b25547dc92f9b316294002e
-
SHA256
11c95b9e59cabea3ea32a971b67d1cea68b58fd4d58714a57311530d0f4652f7
-
SHA512
20d7f4ce3d3c39e54380f24ef9983962a75d033f8c932150a77a3ca86b49003ec8eed03451148c99b4b522a7a659ad0e8dafb3e2dee121bbbc76587e212e01b1
-
SSDEEP
3072:Bojm4ILlCI+4COHCyhaEtHZkOpk97oc4ILlCI+4TOHHSafx:Bd+bwaEtHLhiHt
Static task
static1
Behavioral task
behavioral1
Sample
SPORE (Steam) Trainer Setup.exe
Resource
win10-20230220-en
Malware Config
Targets
-
-
Target
SPORE (Steam) Trainer Setup.exe
-
Size
141KB
-
MD5
0e029f4e50575af65f13c6cc9bf36c62
-
SHA1
9e3e2a3817d55f100b25547dc92f9b316294002e
-
SHA256
11c95b9e59cabea3ea32a971b67d1cea68b58fd4d58714a57311530d0f4652f7
-
SHA512
20d7f4ce3d3c39e54380f24ef9983962a75d033f8c932150a77a3ca86b49003ec8eed03451148c99b4b522a7a659ad0e8dafb3e2dee121bbbc76587e212e01b1
-
SSDEEP
3072:Bojm4ILlCI+4COHCyhaEtHZkOpk97oc4ILlCI+4TOHHSafx:Bd+bwaEtHLhiHt
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-