General
- Target ExpeditionsMacro-1.2.1-win-x64-setup.exe
- Size 81.5MB
- Sample260726-3rqb2ssgpc
- SHA256 25382cdac50af87e1bab57d6d7efc0f2df517dc7a7123e2df2361eaddfb7c16d
- MD5 60500a73054a2c8d986ce333685bfea9
- SHA1 5178cb91847cd958f09d234f37a84a7f3e258bab
- SHA512 33a542dd6d99961338917aed8655cc0e9ad12e2d8b4dc82c49a471755d531e1c1c8df4388677f700c1646dcc250887c3d050f3c48c99e0ecc9b260a9736fc352
- SSDEEP 1572864:IFXaqif+LfCGabCQ7UZ+xyzwqsb3Li6xY1PmiRAlCbuT+oN2BAH:IAPEztZ+xWob3Li6xtiRzbuT+La
- TLSH T15E18333BB19A317BD05B467ABA76A120843BB660A5454C07EBF4899CCF740B40E3F7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target ExpeditionsMacro-1.2.1-win-x64-setup.exe
- Size 81.5MB
- SHA256 25382cdac50af87e1bab57d6d7efc0f2df517dc7a7123e2df2361eaddfb7c16d
- MD5 60500a73054a2c8d986ce333685bfea9
- SHA1 5178cb91847cd958f09d234f37a84a7f3e258bab
- SHA512 33a542dd6d99961338917aed8655cc0e9ad12e2d8b4dc82c49a471755d531e1c1c8df4388677f700c1646dcc250887c3d050f3c48c99e0ecc9b260a9736fc352
- SSDEEP 1572864:IFXaqif+LfCGabCQ7UZ+xyzwqsb3Li6xY1PmiRAlCbuT+oN2BAH:IAPEztZ+xWob3Li6xtiRzbuT+La
- TLSH T15E18333BB19A317BD05B467ABA76A120843BB660A5454C07EBF4899CCF740B40E3F7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.