General
-
Target
osu!_JC.exe
-
Size
4.3MB
-
Sample
230923-pq5tfshc57
-
MD5
28ed552233d877a3d936a57dc588c95f
-
SHA1
d734c95171ecb4515f42d846fddd52e9a38d07a6
-
SHA256
40035ad7a03b86061a96b09d777c145012aca6be8ab6c741480aa6ffd20c5993
-
SHA512
bc7518724f986905050d295bb5ef62b67bb791bf95db06a1564352b33836c97bc292da7d68d14ad8cf4072ebc49a95bc091fde463b2c0b5291a7ccfe10319b59
-
SSDEEP
98304:nUHshqpOqNxP0QEuZ22hJge2xRxpDOhF:hqpOaxEu9VKiF
Static task
static1
Behavioral task
behavioral1
Sample
osu!_JC.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
osu!_JC.exe
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
osu!_JC.exe
-
Size
4.3MB
-
MD5
28ed552233d877a3d936a57dc588c95f
-
SHA1
d734c95171ecb4515f42d846fddd52e9a38d07a6
-
SHA256
40035ad7a03b86061a96b09d777c145012aca6be8ab6c741480aa6ffd20c5993
-
SHA512
bc7518724f986905050d295bb5ef62b67bb791bf95db06a1564352b33836c97bc292da7d68d14ad8cf4072ebc49a95bc091fde463b2c0b5291a7ccfe10319b59
-
SSDEEP
98304:nUHshqpOqNxP0QEuZ22hJge2xRxpDOhF:hqpOaxEu9VKiF
Score6/10-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-