General

  • Target

    Tonfotos-1.9.6 Setup.exe

  • Size

    140.5MB

  • Sample

    240429-161p8adb3w

  • MD5

    9cf08d260cd9636d03ab834008efa18b

  • SHA1

    f5ae9864f8723d58621a29a35e45abc5e719695b

  • SHA256

    27c3cb1d78e331a0665b896264616e689c740d8d0df18ca0ed7c9f0ea21817b9

  • SHA512

    95da1f52c001ff7f63e780014e529623e6eebc95a534e2fcc4b80bd6c1e84c801ce4a7ea593bef389f4ec79b07917126f0c1ceee4edd5791b4b3270c61d6df7e

  • SSDEEP

    3145728:bUwVAd3ffDIQPxtCQpQUc6RvdUMcLNVqM98QZd5+l6qvg:/VAd8MILSMxF+0B

Score
7/10

Malware Config

Targets

    • Target

      Tonfotos-1.9.6 Setup.exe

    • Size

      140.5MB

    • MD5

      9cf08d260cd9636d03ab834008efa18b

    • SHA1

      f5ae9864f8723d58621a29a35e45abc5e719695b

    • SHA256

      27c3cb1d78e331a0665b896264616e689c740d8d0df18ca0ed7c9f0ea21817b9

    • SHA512

      95da1f52c001ff7f63e780014e529623e6eebc95a534e2fcc4b80bd6c1e84c801ce4a7ea593bef389f4ec79b07917126f0c1ceee4edd5791b4b3270c61d6df7e

    • SSDEEP

      3145728:bUwVAd3ffDIQPxtCQpQUc6RvdUMcLNVqM98QZd5+l6qvg:/VAd8MILSMxF+0B

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks