General
- Target GOG_Galaxy_The_First_Templar_-_Special_Edition.exe
- Size 484KB
- Sample241108-cyhyfasmft
- SHA256 8ce2e0902835ca562fce07eb890234e6decfb9013b4cda7dc0cf562b4560e416
- MD5 743f94ddca208cbe8f4eea5269c35a5f
- SHA1 7238429bfc1db6ccd8b5ce8f4585855fdc4d1b4c
- SHA512 9e76647cae8fe228938a11f4a72e55f971f6b91ded7aca778e27b5e137ee1095aea147765c72f2e2eb01c1dccec39c5c36c4ec847c5b618add2f7af9848a7eec
- SSDEEP 12288:rxBLKjPPIihLQj6RJvuFL8I7ft1eW78bCZHq:fKjPPIi6jWdCL8I7h78+ZK
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
GOG_Galaxy_The_First_Templar_-_Special_Edition.exe
Resource
win7-20240729-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target GOG_Galaxy_The_First_Templar_-_Special_Edition.exe
- Size 484KB
- SHA256 8ce2e0902835ca562fce07eb890234e6decfb9013b4cda7dc0cf562b4560e416
- MD5 743f94ddca208cbe8f4eea5269c35a5f
- SHA1 7238429bfc1db6ccd8b5ce8f4585855fdc4d1b4c
- SHA512 9e76647cae8fe228938a11f4a72e55f971f6b91ded7aca778e27b5e137ee1095aea147765c72f2e2eb01c1dccec39c5c36c4ec847c5b618add2f7af9848a7eec
- SSDEEP 12288:rxBLKjPPIihLQj6RJvuFL8I7ft1eW78bCZHq:fKjPPIi6jWdCL8I7h78+ZK
- MD5 SHA1 SHA512 SSDEEP
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL