General

  • Target

    LEGOBatmanDemoSetup.exe

  • Size

    441.9MB

  • Sample

    240703-x8bx4awdld

  • MD5

    8103a8d3eeb95ffc35044c8a049df6a2

  • SHA1

    34e7a6f01325d8afefe8849c24add3127a06331f

  • SHA256

    eb77fb95ced313f08a417fab5d9380d475af64baaf9fcbdad8d6222f1e5e755b

  • SHA512

    97d6e3d523f7deef4ae6b51c6e137e0d11cbd7bc56e3bb1113f573e26ab5ed30f0fcf39cd3e8a50b0f2ef67ae66c9c924c0237a8fbea5161d58cc76b0b00ccef

  • SSDEEP

    6291456:xL6A072xScA44LV7FZCX8JKwXmDBGstA1q3sUXeTx6qw907:5iDLZZpWDBR8ESYS

Score
7/10
upx

Malware Config

Targets

    • Target

      LEGOBatmanDemoSetup.exe

    • Size

      441.9MB

    • MD5

      8103a8d3eeb95ffc35044c8a049df6a2

    • SHA1

      34e7a6f01325d8afefe8849c24add3127a06331f

    • SHA256

      eb77fb95ced313f08a417fab5d9380d475af64baaf9fcbdad8d6222f1e5e755b

    • SHA512

      97d6e3d523f7deef4ae6b51c6e137e0d11cbd7bc56e3bb1113f573e26ab5ed30f0fcf39cd3e8a50b0f2ef67ae66c9c924c0237a8fbea5161d58cc76b0b00ccef

    • SSDEEP

      6291456:xL6A072xScA44LV7FZCX8JKwXmDBGstA1q3sUXeTx6qw907:5iDLZZpWDBR8ESYS

    Score
    7/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks