General
-
Target
OmteExecutorV2.exe
-
Size
76.5MB
-
Sample
240905-l34kdayfqf
-
MD5
e73ae4d5449735154376668c546513eb
-
SHA1
115b47a22cb5d9389dcc5c9bde268fdf30cbb721
-
SHA256
564474f891b8da92851e93c2dfaeb67274abd69b6498ada12665a72fe00e69de
-
SHA512
826f134b1d77aa4975cb69a7accaa619826731c12a72b524d557b7e6fab868b4679a8e006a1676dc9db33b1ab9ce4323e24c390d65ab7d7665dcf3e2d5b04069
-
SSDEEP
1572864:IrziNx5qnhKh31eA8X1UpBAnF9LaqYjueMKewcedGGCMiQDi7:jx5qEh8h16wFZaqyueM+cedkMzO7
Malware Config
Targets
-
-
Target
OmteExecutorV2.exe
-
Size
76.5MB
-
MD5
e73ae4d5449735154376668c546513eb
-
SHA1
115b47a22cb5d9389dcc5c9bde268fdf30cbb721
-
SHA256
564474f891b8da92851e93c2dfaeb67274abd69b6498ada12665a72fe00e69de
-
SHA512
826f134b1d77aa4975cb69a7accaa619826731c12a72b524d557b7e6fab868b4679a8e006a1676dc9db33b1ab9ce4323e24c390d65ab7d7665dcf3e2d5b04069
-
SSDEEP
1572864:IrziNx5qnhKh31eA8X1UpBAnF9LaqYjueMKewcedGGCMiQDi7:jx5qEh8h16wFZaqyueM+cedkMzO7
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates processes with tasklist
-
-
-
Target
$PLUGINSDIR/StdUtils.dll
-
Size
100KB
-
MD5
c6a6e03f77c313b267498515488c5740
-
SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15
-
SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
-
SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
SSDEEP
3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
Score3/10 -
-
-
Target
$PLUGINSDIR/System.dll
-
Size
12KB
-
MD5
0d7ad4f45dc6f5aa87f606d0331c6901
-
SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457
-
SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
-
SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
SSDEEP
192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
Score3/10 -
-
-
Target
$PLUGINSDIR/app-64.7z
-
Size
76.0MB
-
MD5
b051680a2229baeda10996f0508546ea
-
SHA1
b4c8f78074f666b8c5bf2b98af367b180b5b6b64
-
SHA256
9aee76f704a99c600579b44390fbdc8dd64aa2f723dbd034b2708b172d779188
-
SHA512
7386b2990c22ca8bed5b8b6cfb50ec8371322147f44c3c0773643890a8c579f50ec61eecbca67a250cc9a56c5986619c0d14196d0fab76ad4218b18fa347584f
-
SSDEEP
1572864:crziNx5qnhKh31eA8X1UpBAnF9LaqYjueMKewcedGGCMiQDk:Xx5qEh8h16wFZaqyueM+cedkMzw
Score3/10 -
-
-
Target
LICENSE.electron.txt
-
Size
1KB
-
MD5
4d42118d35941e0f664dddbd83f633c5
-
SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c
-
SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
-
SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
Score1/10 -
-
-
Target
chrome_100_percent.pak
-
Size
126KB
-
MD5
8626e1d68e87f86c5b4dabdf66591913
-
SHA1
4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c
-
SHA256
2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59
-
SHA512
03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99
-
SSDEEP
3072:AEKzwqCT4weSxQCS/qGTL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:AEKzwt4hC4/rK18Gb0OV8ld0GecQ3f2
Score3/10 -
-
-
Target
chrome_200_percent.pak
-
Size
175KB
-
MD5
48515d600258d60019c6b9c6421f79f6
-
SHA1
0ef0b44641d38327a360aa6954b3b6e5aab2af16
-
SHA256
07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce
-
SHA512
b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9
-
SSDEEP
3072:rDQYaEQN6AJPrSxQCS/qGTafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNK/r4:rDQYaNN68rC4/Ygx5GMRejnbdZnVE6YR
Score3/10 -
-
-
Target
icudtl.dat
-
Size
10.1MB
-
MD5
adfd2a259608207f256aeadb48635645
-
SHA1
300bb0ae3d6b6514fb144788643d260b602ac6a4
-
SHA256
7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050
-
SHA512
8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc
-
SSDEEP
98304:ffPBQYOo+ddlymff2LfPQCvliXUxiG9Ha93Whla6ZENSs285:ffPBhORjfAHliXUxiG9Ha93Whla6ZEV7
Score3/10 -
-
-
Target
locales/af.pak
-
Size
353KB
-
MD5
464e5eeaba5eff8bc93995ba2cb2d73f
-
SHA1
3b216e0c5246c874ad0ad7d3e1636384dad2255d
-
SHA256
0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1
-
SHA512
726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41
-
SSDEEP
6144:j54QCpN9/WiHIR9a5D4+kQMGSB+jC6kAw1TUKKpg3b9xIsVxSt2y5qP3ux5tPwDV:F9CpN9OiHIRX+HMT+jC6kAw1TYpg3b9P
Score3/10 -
-
-
Target
locales/am.pak
-
Size
569KB
-
MD5
2c933f084d960f8094e24bee73fa826c
-
SHA1
91dfddc2cff764275872149d454a8397a1a20ab1
-
SHA256
fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450
-
SHA512
3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774
-
SSDEEP
12288:QqhqEuPxT8xZTtWosuF9Q5m9yAAVzfukCQox30jH8+I:Zh8T8xTWoZF9Q5m9yAAVzXCQ0
Score3/10 -
-
-
Target
locales/ar.pak
-
Size
624KB
-
MD5
fdbad4c84ac66ee78a5c8dd16d259c43
-
SHA1
3ce3cd751bb947b19d004bd6916b67e8db5017ac
-
SHA256
a62b848a002474a8ea37891e148cbaf4af09bdba7dafebdc0770c9a9651f7e3b
-
SHA512
376519c5c2e42d21acedb1ef47184691a2f286332451d5b8d6aac45713861f07c852fb93bd9470ff5ee017d6004aba097020580f1ba253a5295ac1851f281e13
-
SSDEEP
12288:K+sgtqIj5/XvYUtOkQIkqBJ5SNbW+eTtvZEMgSENjM:KD4Fek75z+K
Score3/10 -
-
-
Target
locales/bg.pak
-
Size
652KB
-
MD5
38bcabb6a0072b3a5f8b86b693eb545d
-
SHA1
d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89
-
SHA256
898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1
-
SHA512
002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef
-
SSDEEP
12288:MMq8w2kMLlYrdAs1aQUx41aVVwslMLOmFOMw35uKN31tfbDMxbV2Jfu64Kjz5fS+:MMqckulYrdAs1aQUmBsmRw35uK7Jgxho
Score3/10 -
-
-
Target
locales/bn.pak
-
Size
838KB
-
MD5
9340520696e7cb3c2495a78893e50add
-
SHA1
eed5aeef46131e4c70cd578177c527b656d08586
-
SHA256
1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39
-
SHA512
62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf
-
SSDEEP
3072:6gGTLRFbMdhBVHvr5eSnC6PRWhk7Bbd8+D95H0XluZ:YWBlvr5FCYRWuBbdB5wl2
Score3/10 -
-
-
Target
locales/ca.pak
-
Size
400KB
-
MD5
4cd6b3a91669ddcfcc9eef9b679ab65c
-
SHA1
43c41cb00067de68d24f72e0f5c77d3b50b71f83
-
SHA256
56efff228ee3e112357d6121b2256a2c3acd718769c89413de82c9d4305459c6
-
SHA512
699be9962d8aae241abd1d1f35cd8468ffbd6157bcd6bdf2c599d902768351b247baad6145b9826d87271fd4a19744eb11bf7065db7fefb01d66d2f1f39015a9
-
SSDEEP
12288:bgoRVrijIs3cejEYBCqS4o3nbhjJSwHQliEwfwVEMXdLbpuQ16BtryBiGIle3nei:b3GQUwJAMNTCypxB5WMml
Score3/10 -
-
-
Target
locales/cs.pak
-
Size
409KB
-
MD5
eeee212072ea6589660c9eb216855318
-
SHA1
d50f9e6ca528725ced8ac186072174b99b48ea05
-
SHA256
de92f14480770401e39e22dcf3dd36de5ad3ed22e44584c31c37cd99e71c4a43
-
SHA512
ea068186a2e611fb98b9580f2c5ba6fd1f31b532e021ef9669e068150c27deee3d60fd9ff7567b9eb5d0f98926b24defabc9b64675b49e02a6f10e71bb714ac8
-
SSDEEP
6144:RquUIAMYOnQYeAIV4g558YwGKNDsku8Qy:Rq/IA5On504g558YwbNDsC
Score3/10 -
-
-
Target
locales/da.pak
-
Size
371KB
-
MD5
e7ba94c827c2b04e925a76cb5bdd262c
-
SHA1
abba6c7fcec8b6c396a6374331993c8502c80f91
-
SHA256
d8da7ab28992c8299484bc116641e19b448c20adf6a8b187383e2dba5cd29a0b
-
SHA512
1f44fce789cf41fd62f4d387b7b8c9d80f1e391edd2c8c901714dd0a6e3af32266e9d3c915c15ad47c95ece4c7d627aa7339f33eea838d1af9901e48edb0187e
-
SSDEEP
6144:czP4qlrn8+ua0swlGVJJwoXlw5CvET5VTrBGzO7iJyd4tTWwT:dqlr89JklwH55rETL
Score3/10 -