General
-
Target
RPGMZ Setup.exe
-
Size
907.1MB
-
Sample
241119-w8t81azdlg
-
MD5
ae9801ac8a5fb2e629f43567607a4e8c
-
SHA1
0b08587279a9143c0062fdc3ddeb280bf9096b02
-
SHA256
ecb637d1d896d12b79cae638be5ad25f13748090d3bdf8b0a820a35de43c66d7
-
SHA512
b4248dce4bbb8334c1db5a0c7f790201ad2296ed643a85b801d55e240dfc9fb3f47cb645d80c0e677f402a6e128d5af532ad65a6ca5830100aebe3e4ef8b76d8
-
SSDEEP
25165824:otIRV1pj+sEzxI4yP4qAsPZrPOdma9DTRIig/KI:oyy/fyP41IZrOd19XReT
Static task
static1
Malware Config
Targets
-
-
Target
RPGMZ Setup.exe
-
Size
907.1MB
-
MD5
ae9801ac8a5fb2e629f43567607a4e8c
-
SHA1
0b08587279a9143c0062fdc3ddeb280bf9096b02
-
SHA256
ecb637d1d896d12b79cae638be5ad25f13748090d3bdf8b0a820a35de43c66d7
-
SHA512
b4248dce4bbb8334c1db5a0c7f790201ad2296ed643a85b801d55e240dfc9fb3f47cb645d80c0e677f402a6e128d5af532ad65a6ca5830100aebe3e4ef8b76d8
-
SSDEEP
25165824:otIRV1pj+sEzxI4yP4qAsPZrPOdma9DTRIig/KI:oyy/fyP41IZrOd19XReT
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
MITRE ATT&CK Enterprise v15
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1