General
- Target CS15Setup.exe
- Size 459.5MB
- Sample260624-ptnpcab18t
- SHA256 aff3f8475d1c664b76a69b4d3512f400808ee22218ad05399fa14e240fe96a2f
- MD5 18d1f3fe463bcc91abb564ac7a65d146
- SHA1 f65efa9b400a8b8d92195f2d8a90f65b65d77ed1
- SHA512 f85b9a85349565bd254a1177adfe0850de698c31749b023021b12653f2321ffd98a88e18e867bc5136fdad48c5d1cf31fe6f3971644eac04a97bdbbb08e0b1ee
- SSDEEP 6291456:EjX+8jKSh3ty8KQC1cysDIofA/ZdItd8pjB0roRxKvIp1mQvwWuqsRhV4NOI+Lvk:8O4FC1PsDXfzYpVKozKvIbmYc4AIA4
- TLSH T1203933495FB1C1B6E7B82DB79F485D011BBFD2042BA167021DFDE58EA6368EA0D34432
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target CS15Setup.exe
- Size 459.5MB
- SHA256 aff3f8475d1c664b76a69b4d3512f400808ee22218ad05399fa14e240fe96a2f
- MD5 18d1f3fe463bcc91abb564ac7a65d146
- SHA1 f65efa9b400a8b8d92195f2d8a90f65b65d77ed1
- SHA512 f85b9a85349565bd254a1177adfe0850de698c31749b023021b12653f2321ffd98a88e18e867bc5136fdad48c5d1cf31fe6f3971644eac04a97bdbbb08e0b1ee
- SSDEEP 6291456:EjX+8jKSh3ty8KQC1cysDIofA/ZdItd8pjB0roRxKvIp1mQvwWuqsRhV4NOI+Lvk:8O4FC1PsDXfzYpVKozKvIbmYc4AIA4
- TLSH T1203933495FB1C1B6E7B82DB79F485D011BBFD2042BA167021DFDE58EA6368EA0D34432
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.