4fa0e396cda9578143ad90ff03702a3b9c796c657f3bdaaf851ea79cb46b86d7

General

Target
SU-30 Aircraft Procurement.iso
Size 24.8MB
Sample240111-sa124sagc7
SHA256 4fa0e396cda9578143ad90ff03702a3b9c796c657f3bdaaf851ea79cb46b86d7
MD5 7317ff828f94cc104e93c259025eb465
SHA1 46bee284a2f3be9b429e014d01b5a30d0821aee9
SHA512 dc9f6e0d6d642edb427d5b003ee0daf4ad28c149f3fe2aa2edeb52c0bb6b9f33de17c117d97fcabc4a4479c626bdf4671058d07290289f6285465213f1bc04cc
SSDEEP 196608:4iyAee0EFuGYxn26HSJyyx9uRhS4nw8D:YAL0EFixnZHSJlS/w8D
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

spyware stealer

Malware Config

Targets

- Target
  .temp/.tmp.exe
- Size 24.6MB
- SHA256 dab645ecb8b2e7722b140ffe1fd59373a899f01bc5d69570d60b8b26781c64fb
- MD5 3309ec4eb3d75c9c478fdd50c678e4e8
- SHA1 cea72265caf9b4746d3d925f795e62df24ff7d61
- SHA512 166ceb5dc3a27b1aac4e30459fd6320ee16a5232b6f46c4e1560f89d975f1fafc04a80a94fa7466f8d58accc8ec38fb399e61ec291dae0b905f6a042ff083563
- SSDEEP 196608:GiyAee0EFuGYxn26HSJyyx9uRhS4nw8DJ:mAL0EFixnZHSJlS/w8DJ
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

spyware stealer
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
behavioral1 behavioral2
- Target
  .temp/sample.pdf
- Size 140KB
- SHA256 999635f52114ca98fbfd5bf1cca9d6dc8030950baaa1a154619bd830238650f5
- MD5 d32a89ee1181bfd990ac5ded081ec650
- SHA1 848485a5c0f30bdffd0c8e2ca336f23836da171a
- SHA512 6802062fdcdaa41b17ad5a1cc8bebb1fcbb9a874933578d42d06d7a8290902abf8a1aaeaa4b04b35c1b9d57639a5c262198a9c717f0dfbec7bf028d1a1c3bcdc
- SSDEEP 3072:DpJ5377sW8DJ93rcAtOhg4Oce8n1xdobMvV7OcZox6oVz:DZcWi93wAt6DpVLKz
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral3 behavioral4
- Target
  Air HQ PR Policy.lnk
- Size 1KB
- SHA256 a811a2dea86dbf6ee9a288624de029be24158fa88f5a6c10acf5bf01ae159e36
- MD5 b10a77609b6420cc5247897d741ab41e
- SHA1 f956660e3970f293ef44437a0234c4f5588c11f3
- SHA512 0419a9befbbdbb4f7b67bfa701f0d748401b397be3516ab85fb264d5bad8b71f3d953a50000e558d6b7d1c33d47aa8c9b09c911d175ab984f70ccc6c16989957
- MD5 SHA1 SHA512
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6