General

  • Target

    osu!install.exe

  • Size

    4.3MB

  • Sample

    231012-q3ryssce8t

  • MD5

    5f7a7a98c33275959673865f3d3ca2b6

  • SHA1

    9f0912c2e960c59b2e4736ff4fc179e6219a6a81

  • SHA256

    eaed52b8ec6d17e37bea08c51ef13a2d4c474fae1cfb955dd6de0a0277f99750

  • SHA512

    ab352b1230255213f0f63a68a44db8e261210cf430204f8a07a1523d94872698b04bf844e632c1b736033789815583471a7ab97186cd9c70d8e4eb70e8532df6

  • SSDEEP

    98304:iwlL1WUNYpdlLAOUpD4UJAhGtaSt6Mma3xRxpDOhn:iwlcUNYlLAOUp7JcGtaSt6FaXin

Score
5/10

Malware Config

Targets

    • Target

      osu!install.exe

    • Size

      4.3MB

    • MD5

      5f7a7a98c33275959673865f3d3ca2b6

    • SHA1

      9f0912c2e960c59b2e4736ff4fc179e6219a6a81

    • SHA256

      eaed52b8ec6d17e37bea08c51ef13a2d4c474fae1cfb955dd6de0a0277f99750

    • SHA512

      ab352b1230255213f0f63a68a44db8e261210cf430204f8a07a1523d94872698b04bf844e632c1b736033789815583471a7ab97186cd9c70d8e4eb70e8532df6

    • SSDEEP

      98304:iwlL1WUNYpdlLAOUpD4UJAhGtaSt6Mma3xRxpDOhn:iwlcUNYlLAOUp7JcGtaSt6FaXin

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks