General

  • Target

    Downloads.rar

  • Size

    786KB

  • Sample

    240426-v6911agf69

  • MD5

    ba1da75911433e46b1762462be8d0df5

  • SHA1

    de312e2fb0c9b60852345b58a171e9b7f337f967

  • SHA256

    9f4883ec1194d02a1362127dc61fe67a629f1d585764f942d7bbf9bd29eff235

  • SHA512

    9f54e6cd6ff174d1d8286d566a5e45d561e3ef61a65ad9a3128ad5308ff8983914e23c70552ebea0cbfc3faaa098c6529136162ee6dd6c7d069d1c07859744c4

  • SSDEEP

    12288:v1Vmv53eBTTq1XasOtsiAnOP5KP/x4eLk1mXG4wcbyRnwY8fJE6N28HFb7RXCgN3:vYoBTT5t2neKxXLk1SxfJzNptRX2nBRW

Score
5/10

Malware Config

Targets

    • Target

      SetupPoker.exe

    • Size

      961KB

    • MD5

      4b7f817c7e63ca26090fc2c3603dc937

    • SHA1

      5ec5c285ab8d3986edf1e74f0d8afaf7f3b44550

    • SHA256

      5b79e006c00a5e8e621ad8cdba01491e5a2ec1f6e8500b02f842e7d5451b432e

    • SHA512

      ad465a145bcc0d080d776c3a5de0ff4490b844116c0f772ad22cf7f166878b7bbadcc84bd53a59f92286157b44ea7aab8a8ab5461055ab11369491d95ec220c9

    • SSDEEP

      24576:S8EBcrb/aIKxTj0odFPa/1JLJepfwoOlvlx:dEByiIS4ou/LJeRHOlvlx

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target

      goldbet-poker.exe

    • Size

      788KB

    • MD5

      204128b789c33ffa063e8f1f0f378680

    • SHA1

      b25dff8d3031c5aa2e9281e03289b9b2ccb24725

    • SHA256

      c873ccaa7639178426193e0bb3204ef4cae0f873abccb743f2afb594619f4fe4

    • SHA512

      13dcb3af4791dc154098239373d155bad40f2f81c6d503100997d8e45e2e4aeb7b9afcdf5a1e3bdf6b65143dfe4e7c181ef4cac1abc07a9e2735376a286102b3

    • SSDEEP

      12288:jKA/pA97806QTLysboUg9BO1kZLcVDlrzLBA4ltVFnljAuu7kz2:bRAt80YsUUyBUk0zLnNBSuugz2

    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks