General
-
Target
All information for the hotel November 2023.zip
-
Size
2.1MB
-
Sample
231128-pnbslahh41
-
MD5
3235ac064c5a3daad40df9882a7094a6
-
SHA1
3ae4dcfb8afb984d54820f6625854652766fc9c0
-
SHA256
fc4e7717616226d720bc8614a6b691124b607c79ed8f6a4c2b7816f5dac835b2
-
SHA512
28b93c0c2ec0c11abbbb611290a04e68889121a58ed14a04b42884e9a155937350d34b1cdba7af83421576dac91bf3755170edaffd15171fca3a9826f7fd0824
-
SSDEEP
49152:jt8nA61iD/Ea8pK/6TkFyf0hfH+oAym0qEUHLOOIO1YViK2Gy/Qf:Zj6Q/EpKiTkFzhvrA3EUybGwiPNIf
Malware Config
Targets
-
-
Target
Wishes for our journey November 2023.scr
-
Size
643.0MB
-
MD5
211eb4f3ef90b4de98dbaf02ca4e84ea
-
SHA1
9cedbdb80bfad19a544b654c1acd1bea05100f3d
-
SHA256
3987ec9427b0cd379f15d0b47495d82fb02d0d81ff7d97c8ecb1cc89d1579855
-
SHA512
8ce12429bb100cdc4382c37a35292592129af1870f397182b2e5e071be685634d3ff7e29b347fed489190d0e64456f14c97b08be4068537266c75a3cfc60fdc5
-
SSDEEP
49152:WJM8HnE4zw7vtvw2DnXSGLZDRSh0z5+huOV0J3xoX7ixFgn:WJpzw7vdRDR54u7oy2n
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Reads data files stored by FTP clients
Tries to access configuration files associated with programs like FileZilla.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-