General
- Target MiKaloCheatSetup 1.0.0.msi
- Size 84.0MB
- Sample260727-yae3jach83
- SHA256 9866f0e95cad93b5a2c3d47c96a43ca47d678215ef158f68e9455f926b5b0c07
- MD5 34b8df37fe2c65f936eb1cc2013042fb
- SHA1 5e62c348ea2d3bf920cf7ca0013c5a272bb8db37
- SHA512 3042ab1cb72e798a71473ca24a84fae3a1cad5b15e32455ee35c141cccb2c1cc4097c37ba1860fe6f810a33ebd9e19255fbbebdf770568b3c9ee3cd78a6f875f
- SSDEEP 1572864:6EEGGifRq2KD7PoL8bmMVd5+wE7Lmb2tHfI2ENon1btNpb7+WvYxA/J+fcIN:lEkfRFogL8bmMr5w7wl2NX7LD/JO
- TLSH T1461833DA3B904A89D24DDF3621F6E33E36360FD1F190C6973222F61A177AA0539D119E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MiKaloCheatSetup 1.0.0.msi
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
MiKaloCheatSetup 1.0.0.msi
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target MiKaloCheatSetup 1.0.0.msi
- Size 84.0MB
- SHA256 9866f0e95cad93b5a2c3d47c96a43ca47d678215ef158f68e9455f926b5b0c07
- MD5 34b8df37fe2c65f936eb1cc2013042fb
- SHA1 5e62c348ea2d3bf920cf7ca0013c5a272bb8db37
- SHA512 3042ab1cb72e798a71473ca24a84fae3a1cad5b15e32455ee35c141cccb2c1cc4097c37ba1860fe6f810a33ebd9e19255fbbebdf770568b3c9ee3cd78a6f875f
- SSDEEP 1572864:6EEGGifRq2KD7PoL8bmMVd5+wE7Lmb2tHfI2ENon1btNpb7+WvYxA/J+fcIN:lEkfRFogL8bmMr5w7wl2NX7LD/JO
- TLSH T1461833DA3B904A89D24DDF3621F6E33E36360FD1F190C6973222F61A177AA0539D119E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.