General
- Target Aslains_WoT_Modpack_Installer_v.1.25.0.0_08.exe
- Size 87.4MB
- Sample240613-xvdjrssdmm
- SHA256 310e0d3faa155be12dcae75a99d9b4b339b1fbd0fa63d608b00a5fdfc3c04417
- MD5 862af150751aaaa1824cc1bb9c3026ae
- SHA1 d0583bb1044a6800406b9b3593c911a4e47e2aee
- SHA512 3949fefca652a6a100bada406e67386c429339e485209a745f91e4bd8e7d2fcb212cf27575a85b10da16333130236efc0473ad281356ef4851067d708a256cf3
- SSDEEP 1572864:A0ZZShkyGPoXicSqXnuc0fMF+GE7S2oDjGJSzbeZifR:SiyGPoXiy/F+X6jNzCQ5
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Aslains_WoT_Modpack_Installer_v.1.25.0.0_08.exe
Resource
win10v2004-20240508-en
7 signatures
1800 seconds
Malware Config
Targets
-
- Target Aslains_WoT_Modpack_Installer_v.1.25.0.0_08.exe
- Size 87.4MB
- SHA256 310e0d3faa155be12dcae75a99d9b4b339b1fbd0fa63d608b00a5fdfc3c04417
- MD5 862af150751aaaa1824cc1bb9c3026ae
- SHA1 d0583bb1044a6800406b9b3593c911a4e47e2aee
- SHA512 3949fefca652a6a100bada406e67386c429339e485209a745f91e4bd8e7d2fcb212cf27575a85b10da16333130236efc0473ad281356ef4851067d708a256cf3
- SSDEEP 1572864:A0ZZShkyGPoXicSqXnuc0fMF+GE7S2oDjGJSzbeZifR:SiyGPoXiy/F+X6jNzCQ5
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Legitimate hosting services abused for malware hosting/C2