General
- Target Onelaunch Software.exe
- Size 3.2MB
- Sample240125-sghjcaaegj
- SHA256 6208acc0f0333a79efcb375e127926116cc771d6d6585098206b6f99c79609e0
- MD5 306425979b5aa1d854cba9bfce09b2b1
- SHA1 4e8af2004a77f531e655e2e5cb669c388d0655c9
- SHA512 4e3c1ab8a1bdc7e61a4460be80a9090a29cce0953936455dcf0ea3ce485be29037d7976fd69d3097a0a2a0adc990b6d52f41dee9807f4bc2320893e43b1b668f
- SSDEEP 49152:rqe3f6RzOIKgo6aUynAZjJ78dS+XDKFbfZpepjqVX5rIJwI2J5PiH7nBGte:mSiRzOLyZl7g/XQzZIpjgJLTiH7BUe
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Onelaunch Software.exe
Resource
win10v2004-20231215-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Onelaunch Software.exe
- Size 3.2MB
- SHA256 6208acc0f0333a79efcb375e127926116cc771d6d6585098206b6f99c79609e0
- MD5 306425979b5aa1d854cba9bfce09b2b1
- SHA1 4e8af2004a77f531e655e2e5cb669c388d0655c9
- SHA512 4e3c1ab8a1bdc7e61a4460be80a9090a29cce0953936455dcf0ea3ce485be29037d7976fd69d3097a0a2a0adc990b6d52f41dee9807f4bc2320893e43b1b668f
- SSDEEP 49152:rqe3f6RzOIKgo6aUynAZjJ78dS+XDKFbfZpepjqVX5rIJwI2J5PiH7nBGte:mSiRzOLyZl7g/XQzZIpjgJLTiH7BUe
- MD5 SHA1 SHA512 SSDEEP
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2