General

  • Target

    GOG_Galaxy_2.0.exe

  • Size

    960KB

  • Sample

    231112-shw35age4w

  • MD5

    4e310b3c8eb5fbf369859134863a5cdf

  • SHA1

    4fed7e59415195fc0a2d1a88e8e80e65ed0a7127

  • SHA256

    c5ffa67d268d7ff6730eefcb92da17234d3b48f495285522497827866eb8bb7c

  • SHA512

    33f1a1c62d7d81e4ccad811f2dd90b064236dd2e5bce9e0f5f5d8b3d912c7738e716dfba0484b353a921d7d62e56a8f4b45eafc358c3579c96057c295b0d050b

  • SSDEEP

    12288:T27p5j8DPeuUSFHqLV+JjY4UW61O4RAxDleFbWQCQTFgSYyAzB+Q/uLnK3:T27EDFHqLy826My+QiyGJyAV+muLK3

Malware Config

Targets

    • Target

      GOG_Galaxy_2.0.exe

    • Size

      960KB

    • MD5

      4e310b3c8eb5fbf369859134863a5cdf

    • SHA1

      4fed7e59415195fc0a2d1a88e8e80e65ed0a7127

    • SHA256

      c5ffa67d268d7ff6730eefcb92da17234d3b48f495285522497827866eb8bb7c

    • SHA512

      33f1a1c62d7d81e4ccad811f2dd90b064236dd2e5bce9e0f5f5d8b3d912c7738e716dfba0484b353a921d7d62e56a8f4b45eafc358c3579c96057c295b0d050b

    • SSDEEP

      12288:T27p5j8DPeuUSFHqLV+JjY4UW61O4RAxDleFbWQCQTFgSYyAzB+Q/uLnK3:T27EDFHqLy826My+QiyGJyAV+muLK3

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks