Overview

overview

7

Static

static

3

GoogleInpu...li.exe

windows7-x64

7

GoogleInpu...li.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    GoogleInputToolsNepali.exe

  • Size

    6.1MB

  • Sample

    230614-rsljpsaa97

  • MD5

    dc73a90b2ada4c04ece29c011fafda91

  • SHA1

    fe05d21e29193e48cf09584f66be8cc62963e930

  • SHA256

    bc386ae7f0940897a0fb6a197cb9da1b9b1b084330b0f6886090b2b94a8bb2b3

  • SHA512

    bb4e8a8a2579966d45bbbc54ac1363b839843c6f7d606d8ca1ff4be28aa6ff3af830a312dde6d5f1201cf1d886f39a84aa711a76786753bcfb29b23f884f099e

  • SSDEEP

    98304:t84BN75Ibt3Aegu+gHu2TSnfTYhcSU1/hveQeN/y/U+IZ/7LtTP5Ux9pFy7I:twt39gMuYSnfaUb9+/+Y9I9S7I

Score
7/10
discovery

Malware Config

Targets

    • Target

      GoogleInputToolsNepali.exe

    • Size

      6.1MB

    • MD5

      dc73a90b2ada4c04ece29c011fafda91

    • SHA1

      fe05d21e29193e48cf09584f66be8cc62963e930

    • SHA256

      bc386ae7f0940897a0fb6a197cb9da1b9b1b084330b0f6886090b2b94a8bb2b3

    • SHA512

      bb4e8a8a2579966d45bbbc54ac1363b839843c6f7d606d8ca1ff4be28aa6ff3af830a312dde6d5f1201cf1d886f39a84aa711a76786753bcfb29b23f884f099e

    • SSDEEP

      98304:t84BN75Ibt3Aegu+gHu2TSnfTYhcSU1/hveQeN/y/U+IZ/7LtTP5Ux9pFy7I:twt39gMuYSnfaUb9+/+Y9I9S7I

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks