b8aa7124c604a4c7a2dea2a9a804009a65ac9050015e5d9b57a5850d91d65495

General

Target
PuyoF_ver2.iso
Size 121.4MB
Sample260629-appzaaat6l
SHA256 b8aa7124c604a4c7a2dea2a9a804009a65ac9050015e5d9b57a5850d91d65495
MD5 bb8014c957d4640eb2bb528585152443
SHA1 e24a219da08092a87fad4dc57a01c4982cb7bd71
SHA512 0420d97129b44d116601fafe4287eab46d684056ade70f11bbe171e76973ad801a94c4f40a57fba8ff59cfe71e3aba075d67b672862d2d8661198f6ce7c7cb42
SSDEEP 1572864:1Zf2pJkpk875x/qiJtyUK4vpYpC0Z0h9kGRSj/3IGeq6IvHGFoHzBqkSYCKLKdQg:1ZyJkpB75wcsXE/+fIGffHHzHdETb+I
TLSH
T1EE583322B2F88211F9B327702734D663BD7EFF86D574C9093259A39915A2BD4CB34329
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  PuyoF_ver2.iso
- Size 121.4MB
- SHA256 b8aa7124c604a4c7a2dea2a9a804009a65ac9050015e5d9b57a5850d91d65495
- MD5 bb8014c957d4640eb2bb528585152443
- SHA1 e24a219da08092a87fad4dc57a01c4982cb7bd71
- SHA512 0420d97129b44d116601fafe4287eab46d684056ade70f11bbe171e76973ad801a94c4f40a57fba8ff59cfe71e3aba075d67b672862d2d8661198f6ce7c7cb42
- SSDEEP 1572864:1Zf2pJkpk875x/qiJtyUK4vpYpC0Z0h9kGRSj/3IGeq6IvHGFoHzBqkSYCKLKdQg:1ZyJkpB75wcsXE/+fIGffHHzHdETb+I
- TLSH
  T1EE583322B2F88211F9B327702734D663BD7EFF86D574C9093259A39915A2BD4CB34329
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral1
- Target
  Installer/PuyoF2.0Setup.exe
- Size 59.5MB
- SHA256 3ca736d83ef09d8af0986852f4fb0f76344882a0a1b6ab4d97db0ac579adffb3
- MD5 1f42b75194eadf940716dcd4b0056913
- SHA1 07a31809446704912f2aecfe03a22be740c8e538
- SHA512 1fd909f8e203210b8c8d3e049799b80334c881a5859e20898a8aec1d74774d7ed9338b2bfeb6fe7677823676e5a7e81aa9663df4a6e4232c77631e330939d7b0
- SSDEEP 786432:BvHVcFZbCt84RecBqkHqFU+YCKyyvKVjVdupWUR9DB878EFRz37SpSbbuaj6iUQ:BvHGFoHzBqkSYCKLKdQZR9xET8S3uIX
- TLSH
  T190D7333F6130C2A0E38731FC56A91074AECBCD33E3559B4862D2A7AF66A2F715E4056D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral2