General

  • Target

    osu!install.exe

  • Size

    4.3MB

  • Sample

    240201-w4svdaebbr

  • MD5

    2485b8963d5316b6b17e483ba8a806fb

  • SHA1

    3bc5f8dad0f8a59cf84fade8835ef7f7486af564

  • SHA256

    bfa4ad675cdcd773b7b1c899e0a5e193d05d055d93e001271f06756c8185a28a

  • SHA512

    c671b7e1b2fbb4f84820aff5f93287e2ed9b70f212ffb44c1253e68a3936c976e87dd17f454ea7af3276a0cf9b20e0d7198f9ce77bb22440433cb2fbe2f4f1af

  • SSDEEP

    98304:NpR3HMRtiRyxNu38ufK7IPmOMaV4HRsxRxpDOh:NpRsQRyxNu38uf3et44HRgi

Score
5/10

Malware Config

Targets

    • Target

      osu!install.exe

    • Size

      4.3MB

    • MD5

      2485b8963d5316b6b17e483ba8a806fb

    • SHA1

      3bc5f8dad0f8a59cf84fade8835ef7f7486af564

    • SHA256

      bfa4ad675cdcd773b7b1c899e0a5e193d05d055d93e001271f06756c8185a28a

    • SHA512

      c671b7e1b2fbb4f84820aff5f93287e2ed9b70f212ffb44c1253e68a3936c976e87dd17f454ea7af3276a0cf9b20e0d7198f9ce77bb22440433cb2fbe2f4f1af

    • SSDEEP

      98304:NpR3HMRtiRyxNu38ufK7IPmOMaV4HRsxRxpDOh:NpRsQRyxNu38uf3et44HRgi

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v15

Tasks