General

  • Target

    setup_stardew_valley_1.5.6.1988831614_(53038).exe

  • Size

    587.2MB

  • Sample

    230524-s8hcnadc37

  • MD5

    b99ea7ba69d6c36113ed9fcfa1ff6fd6

  • SHA1

    eebbf65822f2bff52b921fa16e599e391a8bfb93

  • SHA256

    50f5a8cf03415dd39d95ab261be6639f50ca511972f8d25a056a16249e18ebde

  • SHA512

    1ea042a17c2fd9afe318ceb4d4b6f29a42a96a0a3cff4de2f61228df59b4d4c40a402faafa38d5875453d1506c8b9dc72b2219ea4193c39a5199c6711cef8d37

  • SSDEEP

    12582912:ZrZro437kTCA73Kkso8EX9RtU8zXcHSwgkMLdscY/HUKw:ZD3oTZqItRtZ8dhMLdscL

Score
7/10

Malware Config

Targets

    • Target

      setup_stardew_valley_1.5.6.1988831614_(53038).exe

    • Size

      587.2MB

    • MD5

      b99ea7ba69d6c36113ed9fcfa1ff6fd6

    • SHA1

      eebbf65822f2bff52b921fa16e599e391a8bfb93

    • SHA256

      50f5a8cf03415dd39d95ab261be6639f50ca511972f8d25a056a16249e18ebde

    • SHA512

      1ea042a17c2fd9afe318ceb4d4b6f29a42a96a0a3cff4de2f61228df59b4d4c40a402faafa38d5875453d1506c8b9dc72b2219ea4193c39a5199c6711cef8d37

    • SSDEEP

      12582912:ZrZro437kTCA73Kkso8EX9RtU8zXcHSwgkMLdscY/HUKw:ZD3oTZqItRtZ8dhMLdscL

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks