General
- Target setup_the_executive_-_movie_industry_tycoon_1.3.1_(82910).exe
- Size 329.8MB
- Sample260523-rt43fadv4t
- SHA256 ca9ae3f2217df21aa20900e05583b5f2e08066a79ff4d708113b0baf13cc0379
- MD5 93e05c3c6ff2b4c350dd157ae453c6e1
- SHA1 8d6d76a8683a1ba6eed1d8c8d1d481fd7b646875
- SHA512 578061d66c3b160f12b8ab622dd07edac4304e1f571116775f31231d09d9f6799a8adeb7cbcc143206e7cfd259606d91263ca267cea51699d2c687b2a69065ba
- SSDEEP 6291456:A4wr9Tnp5ypglxN06//LuyvVoKCSrZWNNUNUtcduQQz0DmexT3iXGl9uIW4H59e/:A4yhpspgq6/DpvVNx6NUNUeg06arWjI2
- TLSH T14EF83388E243D8D1EA9C05350B74AFD4B330607692D60A79BB30CB946FE75E907B5E87
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target setup_the_executive_-_movie_industry_tycoon_1.3.1_(82910).exe
- Size 329.8MB
- SHA256 ca9ae3f2217df21aa20900e05583b5f2e08066a79ff4d708113b0baf13cc0379
- MD5 93e05c3c6ff2b4c350dd157ae453c6e1
- SHA1 8d6d76a8683a1ba6eed1d8c8d1d481fd7b646875
- SHA512 578061d66c3b160f12b8ab622dd07edac4304e1f571116775f31231d09d9f6799a8adeb7cbcc143206e7cfd259606d91263ca267cea51699d2c687b2a69065ba
- SSDEEP 6291456:A4wr9Tnp5ypglxN06//LuyvVoKCSrZWNNUNUtcduQQz0DmexT3iXGl9uIW4H59e/:A4yhpspgq6/DpvVNx6NUNUeg06arWjI2
- TLSH T14EF83388E243D8D1EA9C05350B74AFD4B330607692D60A79BB30CB946FE75E907B5E87
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.