General
- Target setup_kingdoms_and_castles_123r6_(82341).exe
- Size 484.6MB
- Sample260721-1g3taafe63
- SHA256 524daa35454764f8fdbdeb2ba1a1ad2d36eee3d2cf9befbf841af97e9336ade8
- MD5 f489e036d79d9a05704b7b626d843efa
- SHA1 ac86ed6c313894421e9e40336b4cf0baed32c0f8
- SHA512 3c51709edb285f14ad089a1ddf2c84578e1d7cbc19d0362a69171d31ae22ed81e4169e53d06d1b713c0206b05ad31e1bcca4c2f1e1134b233caf59499c6ee4ba
- SSDEEP 12582912:x7XVhxA0aooFWwlkmUCkYQVdcE6u6xuxK/6V8p1oJimbfjj8NP:hXVh+0JBwCmUn6u6xuc9Q7P8d
- TLSH T1073933B4F093658BC6AF8033A9776D6047984073C5E68039ECA6EB1E087D5D247B6BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
setup_kingdoms_and_castles_123r6_(82341).exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup_kingdoms_and_castles_123r6_(82341).exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target setup_kingdoms_and_castles_123r6_(82341).exe
- Size 484.6MB
- SHA256 524daa35454764f8fdbdeb2ba1a1ad2d36eee3d2cf9befbf841af97e9336ade8
- MD5 f489e036d79d9a05704b7b626d843efa
- SHA1 ac86ed6c313894421e9e40336b4cf0baed32c0f8
- SHA512 3c51709edb285f14ad089a1ddf2c84578e1d7cbc19d0362a69171d31ae22ed81e4169e53d06d1b713c0206b05ad31e1bcca4c2f1e1134b233caf59499c6ee4ba
- SSDEEP 12582912:x7XVhxA0aooFWwlkmUCkYQVdcE6u6xuxK/6V8p1oJimbfjj8NP:hXVh+0JBwCmUn6u6xuc9Q7P8d
- TLSH T1073933B4F093658BC6AF8033A9776D6047984073C5E68039ECA6EB1E087D5D247B6BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)