General
-
Target
Koalageddon-2.0.1.msi
-
Size
46.4MB
-
Sample
231030-te7k5afh44
-
MD5
155295f8dbaae190dd34adadecfb302e
-
SHA1
c720229eb480dadd40649a2447b3e618a83d568c
-
SHA256
793a6b5980872bc0c16c53ee550f860b90e8955fbbf2f0bd15734e05e9b4c3b8
-
SHA512
cd6d4405bf387faa538426a2cfefdecd4c7f3a649f4cfce1eab85cea22a345f304525d222a48785528b7e19f83b76a536a1895e3f32ea8153d93ddae29850dd7
-
SSDEEP
786432:EdQiEpqgLHk81Ywf/9gK7rhd8cHcSQAw8Luh1CKGSsKN4PgGagUiNaLFRB3p/n4U:GXEvE81vCjSE8yhAc1TgUiNaLFRdlx0e
Static task
static1
Behavioral task
behavioral1
Sample
Koalageddon-2.0.1.msi
Resource
win10v2004-20231023-en
Malware Config
Targets
-
-
Target
Koalageddon-2.0.1.msi
-
Size
46.4MB
-
MD5
155295f8dbaae190dd34adadecfb302e
-
SHA1
c720229eb480dadd40649a2447b3e618a83d568c
-
SHA256
793a6b5980872bc0c16c53ee550f860b90e8955fbbf2f0bd15734e05e9b4c3b8
-
SHA512
cd6d4405bf387faa538426a2cfefdecd4c7f3a649f4cfce1eab85cea22a345f304525d222a48785528b7e19f83b76a536a1895e3f32ea8153d93ddae29850dd7
-
SSDEEP
786432:EdQiEpqgLHk81Ywf/9gK7rhd8cHcSQAw8Luh1CKGSsKN4PgGagUiNaLFRB3p/n4U:GXEvE81vCjSE8yhAc1TgUiNaLFRdlx0e
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-