247746350da64e7c566149ebf232dd554a544a3a37d33c7c7aa9279a81f07356

General

Target
game-heroes.of.might.and.magic.3.complete.edition-(77075).rar
Size 960.4MB
Sample260702-tnjknaev6p
SHA256 247746350da64e7c566149ebf232dd554a544a3a37d33c7c7aa9279a81f07356
MD5 2142768a1890e009c8eee54ff29f12ec
SHA1 5b69a01cd93b623cf1361bbff66ac582fa6001fd
SHA512 11a998da733c00438db4aa39f6da9d5e8424d71cb6f5449a13dcfa9961e87b91525a58c681a18fa7056ff4fdd32235d776a1aacf3cfcecd870e2212d4ebcf828
SSDEEP 25165824:f6E2uYvFguDnANocybOzT7nUwEi2rSv+VoWaWrnWHg:f6E2uYd1SybOjUwEiug+2WaWV
TLSH
T156A93387B8875A52EE3FB233E17A5A2122252F92DDCC4EF1DC1197D0215F79CB036269
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  setup_heroes_of_might_and_magic_3_complete_4.0_(3.2)_gog_0.1_(77075)-1.bin
- Size 959.7MB
- SHA256 5f94cb8021a058a48b2f773dfc6702a9dc93945ec3bef49c348859da1bbaf925
- MD5 0f0aa941fdd99f78a1b58ff5e5d9eb74
- SHA1 2715e10e91919d05377d39fd879d43f9f0cb9f87
- SHA512 e8f6e18cb63ed8d8aaaa0c43e2a7edc974927e1a26be1c3e9e05b69d4b406749026c719ec7cff17fbf38fd4c94f86fd825577a143931dd9c143cdd1fe9ebaeac
- SSDEEP 25165824:N6E2uYvFguDnANocybOzT7nUwEi2rSv+VoWaWrnWH3:N6E2uYd1SybOjUwEiug+2WaWc
- TLSH
  T1A4A93387B88B5A42DE3FB237E27E5A3522152F92DDCC4EF1DC0157E0614F69CB026269
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  setup_heroes_of_might_and_magic_3_complete_4.0_(3.2)_gog_0.1_(77075).exe
- Size 801KB
- SHA256 b0f2892b40b55d97d4a99b27a33ab13678d41d1152f54a9c02925de61afb56a5
- MD5 b1c0f5b5d83c17bede6bdd97762b648a
- SHA1 ca68adb8c2d8c6b3afa17a595ad70c2cec062b5a
- SHA512 ed50163de0fcffedc006afe79fbcca428b4c5a1f7bca6b51dd83adfb4842af1af50310bea08b5a06fb641ca8270bb4e855769b50a32db48f7280396540f2af70
- SSDEEP 24576:Vxct1NC2zliixfo8augT6cWmjXf2q6ynZFLQ:3igyHaug+Hmjv4g4
- TLSH
  T1CF050102B7D30133F5358A35C0A28500BF3A75F91AE2A35A2CB8DE5E5DB5F815CB6B52
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer defense_evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops desktop.ini file(s)
- Network Service Discovery
  Attempt to gather information on host's network.
  discovery
behavioral3 behavioral4