General
-
Target
AnimazeLauncherInstaller.exe
-
Size
91.9MB
-
Sample
230503-czb7aafc2y
-
MD5
0f0a207e92a54e0a718f298465d8518d
-
SHA1
14c9bc17211a725e7842cd52a79989c242705f04
-
SHA256
fb21209e97f0ab5a1a167a563ebed3e9771336a883336c8209128fec2bf65257
-
SHA512
448341e1ee2415860246e562a76b9a9e9448f2e13bcbae05683acdcab5bf38d3c16e4cd095aa0bba6914c1665569442149e29f22f3c58518ce08c71d185003fb
-
SSDEEP
1572864:suqLCD0KligXe4tDYwZBqq6AxsB1wixsyb0mZ2ESYdQvltt7H0Spo65QZb9Qx2pD:spLC0Ie41YiB7c1wixHbh2Ejo7USpb5q
Static task
static1
Behavioral task
behavioral1
Sample
AnimazeLauncherInstaller.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
AnimazeLauncherInstaller.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
AnimazeLauncherInstaller.exe
-
Size
91.9MB
-
MD5
0f0a207e92a54e0a718f298465d8518d
-
SHA1
14c9bc17211a725e7842cd52a79989c242705f04
-
SHA256
fb21209e97f0ab5a1a167a563ebed3e9771336a883336c8209128fec2bf65257
-
SHA512
448341e1ee2415860246e562a76b9a9e9448f2e13bcbae05683acdcab5bf38d3c16e4cd095aa0bba6914c1665569442149e29f22f3c58518ce08c71d185003fb
-
SSDEEP
1572864:suqLCD0KligXe4tDYwZBqq6AxsB1wixsyb0mZ2ESYdQvltt7H0Spo65QZb9Qx2pD:spLC0Ie41YiB7c1wixHbh2Ejo7USpb5q
Score8/10-
Blocklisted process makes network request
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-