Resubmissions
04/11/2023, 20:29
231104-y9mlnage95 1004/11/2023, 20:21
231104-y5gjvage34 1004/11/2023, 20:09
231104-yw635sgc97 1004/11/2023, 19:28
231104-x6rkrsfg59 1004/11/2023, 19:23
231104-x4a51ade3y 704/11/2023, 19:18
231104-xz79yafe99 704/11/2023, 19:16
231104-xyvx8afe74 704/11/2023, 18:52
231104-xh15asfc27 10General
-
Target
klyuch-aktivacii-dly-ct7kTVM5Zxs7.exe
-
Size
8.2MB
-
Sample
231104-x4a51ade3y
-
MD5
84cc583acaf2d2ce5230bc53f5725f53
-
SHA1
a36a43bcf7b7966ffec90ffac220938562cc4d65
-
SHA256
493e5223dceb96c32286d78a1f91dd148d3e498b97ae767f013bd5f664385964
-
SHA512
92b41d73f877683aa00b609a21539a6210837c92e72efbf1ed0217e826c2a10095268724f18e88ba26b56c4d37501325787e446363cbc78b7aa60973c8dcc477
-
SSDEEP
196608:gl4/ZHG2jzxzRBJn/Aa5XJNeyxpmz/oxZl1IrKj0sM0AwK3B:gO/ZHV3Jb5XzfxpmzAxZl1cIKoK3B
Malware Config
Targets
-
-
Target
klyuch-aktivacii-dly-ct7kTVM5Zxs7.exe
-
Size
8.2MB
-
MD5
84cc583acaf2d2ce5230bc53f5725f53
-
SHA1
a36a43bcf7b7966ffec90ffac220938562cc4d65
-
SHA256
493e5223dceb96c32286d78a1f91dd148d3e498b97ae767f013bd5f664385964
-
SHA512
92b41d73f877683aa00b609a21539a6210837c92e72efbf1ed0217e826c2a10095268724f18e88ba26b56c4d37501325787e446363cbc78b7aa60973c8dcc477
-
SSDEEP
196608:gl4/ZHG2jzxzRBJn/Aa5XJNeyxpmz/oxZl1IrKj0sM0AwK3B:gO/ZHV3Jb5XzfxpmzAxZl1cIKoK3B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-