General
- Target Tasket++_setup-1.6.exe
- Size 11.3MB
- Sample260421-3ct2pahs51
- SHA256 2bc1826a328ea398418045a0561e9629a34c20a49ace5997ef0d7ad3b2afa972
- MD5 c4d3acff620f2abbbf8766a6b0a85aa3
- SHA1 7ce636e8e1ea9878c7f39702c67be943978e2d7f
- SHA512 52fdb3c0c788a6f798c57d116073dfa5b09d2589051bd57c9d2eea2f6ff145263c2318595238c6b677436f75d66b1cb437f0c9d93c5a7d03791f842d1ca54f77
- SSDEEP 196608:akfyap0bubCHuUim6SDdFq7f1htZiGvwOKxiUQTNxNNWd8Jpeyudb:akfyrbMCHVigg1bZmxeHNN0Fyudb
- TLSH T17DC62333F289673DE06A163B56F2D1608D3BBA51645A8C0692EC3C4CDF7A1A01D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Tasket++_setup-1.6.exe
- Size 11.3MB
- SHA256 2bc1826a328ea398418045a0561e9629a34c20a49ace5997ef0d7ad3b2afa972
- MD5 c4d3acff620f2abbbf8766a6b0a85aa3
- SHA1 7ce636e8e1ea9878c7f39702c67be943978e2d7f
- SHA512 52fdb3c0c788a6f798c57d116073dfa5b09d2589051bd57c9d2eea2f6ff145263c2318595238c6b677436f75d66b1cb437f0c9d93c5a7d03791f842d1ca54f77
- SSDEEP 196608:akfyap0bubCHuUim6SDdFq7f1htZiGvwOKxiUQTNxNNWd8Jpeyudb:akfyrbMCHVigg1bZmxeHNN0Fyudb
- TLSH T17DC62333F289673DE06A163B56F2D1608D3BBA51645A8C0692EC3C4CDF7A1A01D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.