General
-
Target
LEGOBatmanDemoSetup.exe
-
Size
441.9MB
-
Sample
240703-x8bx4awdld
-
MD5
8103a8d3eeb95ffc35044c8a049df6a2
-
SHA1
34e7a6f01325d8afefe8849c24add3127a06331f
-
SHA256
eb77fb95ced313f08a417fab5d9380d475af64baaf9fcbdad8d6222f1e5e755b
-
SHA512
97d6e3d523f7deef4ae6b51c6e137e0d11cbd7bc56e3bb1113f573e26ab5ed30f0fcf39cd3e8a50b0f2ef67ae66c9c924c0237a8fbea5161d58cc76b0b00ccef
-
SSDEEP
6291456:xL6A072xScA44LV7FZCX8JKwXmDBGstA1q3sUXeTx6qw907:5iDLZZpWDBR8ESYS
Static task
static1
Behavioral task
behavioral1
Sample
LEGOBatmanDemoSetup.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
LEGOBatmanDemoSetup.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
LEGOBatmanDemoSetup.exe
-
Size
441.9MB
-
MD5
8103a8d3eeb95ffc35044c8a049df6a2
-
SHA1
34e7a6f01325d8afefe8849c24add3127a06331f
-
SHA256
eb77fb95ced313f08a417fab5d9380d475af64baaf9fcbdad8d6222f1e5e755b
-
SHA512
97d6e3d523f7deef4ae6b51c6e137e0d11cbd7bc56e3bb1113f573e26ab5ed30f0fcf39cd3e8a50b0f2ef67ae66c9c924c0237a8fbea5161d58cc76b0b00ccef
-
SSDEEP
6291456:xL6A072xScA44LV7FZCX8JKwXmDBGstA1q3sUXeTx6qw907:5iDLZZpWDBR8ESYS
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-