034500264caf24dd1ecdc02f76e56707bfbb691cd2624414e6cad5784af9c2c8

General

Target
kyber-installer-win64.zip
Size 91.4MB
Sample260806-ba65paeh89
SHA256 034500264caf24dd1ecdc02f76e56707bfbb691cd2624414e6cad5784af9c2c8
MD5 6c40aad9f4d990853ca4efffa36511b1
SHA1 47da8f9bec1c66cac2a2f0a4e59bd3137a0fcb29
SHA512 81205ca488c0d26b8562aaa06435dd50c92a0f23395f70bf67dd39479e9d0197de41eb0e987e3808b430a15d240bcf4dcdba5fe4e44aa6ccc285f80d3f3af37a
SSDEEP 1572864:VO/u0IM6G/DPZVLcUT8DKKz8La4B3vs9IEJGM/V5vXK1s6+Q3r2cpm0JfMqt:VSulMfDxpc8GzL4EZGMdtXhXwnMa
TLSH
T16C2833E82B93B9CD1284F826FB502EA6243927C71657C50CE28A777D4F8F4E579D680C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  kyber-installer-win64.zip
- Size 91.4MB
- SHA256 034500264caf24dd1ecdc02f76e56707bfbb691cd2624414e6cad5784af9c2c8
- MD5 6c40aad9f4d990853ca4efffa36511b1
- SHA1 47da8f9bec1c66cac2a2f0a4e59bd3137a0fcb29
- SHA512 81205ca488c0d26b8562aaa06435dd50c92a0f23395f70bf67dd39479e9d0197de41eb0e987e3808b430a15d240bcf4dcdba5fe4e44aa6ccc285f80d3f3af37a
- SSDEEP 1572864:VO/u0IM6G/DPZVLcUT8DKKz8La4B3vs9IEJGM/V5vXK1s6+Q3r2cpm0JfMqt:VSulMfDxpc8GzL4EZGMdtXhXwnMa
- TLSH
  T16C2833E82B93B9CD1284F826FB502EA6243927C71657C50CE28A777D4F8F4E579D680C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  KyberLauncherInstaller.exe
- Size 92.0MB
- SHA256 933c7f8f059e2ebf535ba2849ab9df1d01aa9a13fcdce7a54cd63837c50bf2b1
- MD5 2ce353ef62d43be5c4bddf811004f2d9
- SHA1 bcf73871c1b3ae030ed3d97f8ec44438fe608556
- SHA512 47c17a73922ac1aaa08a317e3652cde351dd80b1a08901c5e85ddd6f93df7cb1be6fc3df4b8053cd4465e09f80d0f2ca15f1371e67a5d42e8f4ed1f7a8fc786a
- SSDEEP 1572864:IOTmccsQO7Nj37naC9eNY0tET0AzXbmt6mVo0J15rtGnYsOgtBYkheyXFEkt:IYmtsvNrbaSQZlAwHo075tb1MlEQ
- TLSH
  T1FF283366A387622DE078653659F1D7301B372E71940E88CD9ADC3C5FFF7B0A02D6A489
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery installer ransomware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral3 behavioral4