General
-
Target
Tonfotos-1.9.6 Setup.exe
-
Size
140.5MB
-
Sample
240429-161p8adb3w
-
MD5
9cf08d260cd9636d03ab834008efa18b
-
SHA1
f5ae9864f8723d58621a29a35e45abc5e719695b
-
SHA256
27c3cb1d78e331a0665b896264616e689c740d8d0df18ca0ed7c9f0ea21817b9
-
SHA512
95da1f52c001ff7f63e780014e529623e6eebc95a534e2fcc4b80bd6c1e84c801ce4a7ea593bef389f4ec79b07917126f0c1ceee4edd5791b4b3270c61d6df7e
-
SSDEEP
3145728:bUwVAd3ffDIQPxtCQpQUc6RvdUMcLNVqM98QZd5+l6qvg:/VAd8MILSMxF+0B
Static task
static1
Behavioral task
behavioral1
Sample
Tonfotos-1.9.6 Setup.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
Tonfotos-1.9.6 Setup.exe
-
Size
140.5MB
-
MD5
9cf08d260cd9636d03ab834008efa18b
-
SHA1
f5ae9864f8723d58621a29a35e45abc5e719695b
-
SHA256
27c3cb1d78e331a0665b896264616e689c740d8d0df18ca0ed7c9f0ea21817b9
-
SHA512
95da1f52c001ff7f63e780014e529623e6eebc95a534e2fcc4b80bd6c1e84c801ce4a7ea593bef389f4ec79b07917126f0c1ceee4edd5791b4b3270c61d6df7e
-
SSDEEP
3145728:bUwVAd3ffDIQPxtCQpQUc6RvdUMcLNVqM98QZd5+l6qvg:/VAd8MILSMxF+0B
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-