General
-
Target
Songzz!!.rar
-
Size
52.0MB
-
Sample
240228-q6y7aadb72
-
MD5
9560b4f3bcb643649f52839e01197cdd
-
SHA1
184737b1e1d73101a25837081453e09adb7f9fbe
-
SHA256
4d485f9561d0dc0aa9825602a0e09e2e2e1b4d21e4e9bba6e861c1474466ac2a
-
SHA512
011f07d14de44c1099c5055121e55b2551fd44348d9f42e34f8824f329480fd49a7d17c56975e1859040b0ffcd4bc345d5712d1416333589d358dc24b2511cad
-
SSDEEP
786432:XCR9Q4RUgaEQ7xJ3ONHV9ByMcwwIOefGukOJHXKbJ45w1jZln7EKnDU//NwB0HKS:XOUYKNONV9+IzeOROm5wx4Yi00qjZCX
Malware Config
Targets
-
-
Target
Songzz!!.rar
-
Size
52.0MB
-
MD5
9560b4f3bcb643649f52839e01197cdd
-
SHA1
184737b1e1d73101a25837081453e09adb7f9fbe
-
SHA256
4d485f9561d0dc0aa9825602a0e09e2e2e1b4d21e4e9bba6e861c1474466ac2a
-
SHA512
011f07d14de44c1099c5055121e55b2551fd44348d9f42e34f8824f329480fd49a7d17c56975e1859040b0ffcd4bc345d5712d1416333589d358dc24b2511cad
-
SSDEEP
786432:XCR9Q4RUgaEQ7xJ3ONHV9ByMcwwIOefGukOJHXKbJ45w1jZln7EKnDU//NwB0HKS:XOUYKNONV9+IzeOROm5wx4Yi00qjZCX
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-