General
-
Target
Latest_Setup_2023_UseAs_PassKey.rar
-
Size
9.5MB
-
Sample
230609-wbpx1sdg2t
-
MD5
bfd1e45a3da9ab60920bc179a35aa5ef
-
SHA1
27e172ccb6fa64265af836b09f5ae964e134fe56
-
SHA256
fceb9c2a047904f2295d9fa1e2b10735383264b1a379f1accce9f06d6c1ed86c
-
SHA512
3ef488cbebf57ec0086e1e3f9622fc4c130c89d70feac9606670f092e121efa1fc6cc3a6414e9b65be19c045e6e717104d003d4d112f0dfbb4e4a5616853a7ec
-
SSDEEP
196608:A1GKSOZXZpF9I3EnUg/3i8++AENS9/ZpXztvgaC456ABW40rtUY232eUs:A1GKrRrFe3EnN/5AENS9LXzWAdJ054Us
Static task
static1
Malware Config
Targets
-
-
Target
SetupUp.exe
-
Size
705.3MB
-
MD5
056222662e88089fc66f570efb67443b
-
SHA1
72c6db184a2b37b4286f0a83b0eb18b13a3ca506
-
SHA256
6e2676e7a13ec02b7c84a77b4350f13ac24f5faf49ea4a5e2a9c9e42939d323a
-
SHA512
db586cdcd3fe91c3157b05307d5449415c358d899f38ac8b1e433e188103f22d5db62551cca3d020152ff209dc19091a6a67f4367857fff04724b3046b74f9de
-
SSDEEP
1572864:mAa5bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb9:Ra
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Accesses cryptocurrency files/wallets, possible credential harvesting
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.
-