General
-
Target
pokemmo-installer-windows.exe
-
Size
97.3MB
-
Sample
240214-m97faahf94
-
MD5
c48cc87c0e95e3eb83692a79afda0d89
-
SHA1
ae142b0f6a56b56473e98761e40a4662b3128fea
-
SHA256
80bb76e7076fe8ca3835128298c60ed3c4d5f4e2cd1be0dd32b29fd3edf660c3
-
SHA512
dcc1d56eacb7e75e446f08e0ae1bd2d7863016f5268f87944b66306c9dfa9b45744de71b2ed3a34542b07f35232fd00ee9625ffdfffdc56ddeb304519fa18348
-
SSDEEP
1572864:M0h2dU2MFIash7wGf34r/gxndunOXlhIotMjsib3/wwb7Hhvo0kHqY:M3DMyasCMxdJXXNUb34c7HTkHqY
Static task
static1
Behavioral task
behavioral1
Sample
pokemmo-installer-windows.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
pokemmo-installer-windows.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
pokemmo-installer-windows.exe
-
Size
97.3MB
-
MD5
c48cc87c0e95e3eb83692a79afda0d89
-
SHA1
ae142b0f6a56b56473e98761e40a4662b3128fea
-
SHA256
80bb76e7076fe8ca3835128298c60ed3c4d5f4e2cd1be0dd32b29fd3edf660c3
-
SHA512
dcc1d56eacb7e75e446f08e0ae1bd2d7863016f5268f87944b66306c9dfa9b45744de71b2ed3a34542b07f35232fd00ee9625ffdfffdc56ddeb304519fa18348
-
SSDEEP
1572864:M0h2dU2MFIash7wGf34r/gxndunOXlhIotMjsib3/wwb7Hhvo0kHqY:M3DMyasCMxdJXXNUb34c7HTkHqY
Score6/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-