General
- Target Zuhls Macro Setup 2.0.0 (1).exe
- Size 87.7MB
- Sample260807-chxrnawape
- SHA256 8b77f8ed63e7900448aa905131176d5d54308ceab818ac0a458a729d9013cb2b
Score
7/10
Malware Config
Targets
-
- Target Zuhls Macro Setup 2.0.0 (1).exe
- Size 87.7MB
- SHA256 8b77f8ed63e7900448aa905131176d5d54308ceab818ac0a458a729d9013cb2b
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target Zuhls Macro.exe
- Size 164.7MB
- SHA256 252fcec67588dbdc8d686c112575d0a242b1fa8ab38081ba9c35ffb6fef12ed0
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target $R0/Uninstall Zuhls Macro.exe
- Size 212KB
- SHA256 87b4dc7895d25d935ae7a35e4d19b0c23853df73fc526608a9da3c5e5d8f2949
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.