General
-
Target
setup_stardew_valley_1.5.6.1988831614_(53038).exe
-
Size
587.2MB
-
Sample
230524-s8hcnadc37
-
MD5
b99ea7ba69d6c36113ed9fcfa1ff6fd6
-
SHA1
eebbf65822f2bff52b921fa16e599e391a8bfb93
-
SHA256
50f5a8cf03415dd39d95ab261be6639f50ca511972f8d25a056a16249e18ebde
-
SHA512
1ea042a17c2fd9afe318ceb4d4b6f29a42a96a0a3cff4de2f61228df59b4d4c40a402faafa38d5875453d1506c8b9dc72b2219ea4193c39a5199c6711cef8d37
-
SSDEEP
12582912:ZrZro437kTCA73Kkso8EX9RtU8zXcHSwgkMLdscY/HUKw:ZD3oTZqItRtZ8dhMLdscL
Static task
static1
Behavioral task
behavioral1
Sample
setup_stardew_valley_1.5.6.1988831614_(53038).exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
setup_stardew_valley_1.5.6.1988831614_(53038).exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
setup_stardew_valley_1.5.6.1988831614_(53038).exe
-
Size
587.2MB
-
MD5
b99ea7ba69d6c36113ed9fcfa1ff6fd6
-
SHA1
eebbf65822f2bff52b921fa16e599e391a8bfb93
-
SHA256
50f5a8cf03415dd39d95ab261be6639f50ca511972f8d25a056a16249e18ebde
-
SHA512
1ea042a17c2fd9afe318ceb4d4b6f29a42a96a0a3cff4de2f61228df59b4d4c40a402faafa38d5875453d1506c8b9dc72b2219ea4193c39a5199c6711cef8d37
-
SSDEEP
12582912:ZrZro437kTCA73Kkso8EX9RtU8zXcHSwgkMLdscY/HUKw:ZD3oTZqItRtZ8dhMLdscL
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-