337fa640fcc88f6b779e076ae632a988cb6911cdc811871018f839e98f29226b

General

Target
337fa640fcc88f6b779e076ae632a988cb6911cdc811871018f839e98f29226b
Size 3.0MB
Sample260815-age44scg62
SHA256 337fa640fcc88f6b779e076ae632a988cb6911cdc811871018f839e98f29226b
MD5 557f87fc013dc0029b218e1a7c74bbba
SHA1 f181ea0d06e540a566f1831591fb230dd07ded7a
SHA512 7749c64ddeccbef9077c0303b39a330ba7c4be27ea6db8caec0cf3f3d9b337b6b8d25d94d92a68e4df56f4b16d4c103c032202166cf9287cbcc412cf5b539a1a
SSDEEP 98304:3AzrTNnprcGQOwzFZWUMYJBmytadcEGJr:Q9pszbfrJBmIadyh
TLSH
T14BE5333AE7678DF5E835977261A2EB0B57784D798EAE4A08FF054C336C37215D21A023
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  337fa640fcc88f6b779e076ae632a988cb6911cdc811871018f839e98f29226b
- Size 3.0MB
- SHA256 337fa640fcc88f6b779e076ae632a988cb6911cdc811871018f839e98f29226b
- MD5 557f87fc013dc0029b218e1a7c74bbba
- SHA1 f181ea0d06e540a566f1831591fb230dd07ded7a
- SHA512 7749c64ddeccbef9077c0303b39a330ba7c4be27ea6db8caec0cf3f3d9b337b6b8d25d94d92a68e4df56f4b16d4c103c032202166cf9287cbcc412cf5b539a1a
- SSDEEP 98304:3AzrTNnprcGQOwzFZWUMYJBmytadcEGJr:Q9pszbfrJBmIadyh
- TLSH
  T14BE5333AE7678DF5E835977261A2EB0B57784D798EAE4A08FF054C336C37215D21A023
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery execution trojan
- Command and Scripting Interpreter: PowerShell
  Run Powershell and hide display window.
  execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Checks whether UAC is enabled
  defense_evasion trojan
behavioral1 behavioral2
- Target
  CocCocReal.exe
- Size 13.0MB
- SHA256 7bd45b747077934cb5d27f6d68294b9b60b690639ae5cdfc9601e733493bc9e5
- MD5 6153c3b6724ef0dae16aaa5c15e35fe3
- SHA1 6ac195132a3090f23a15f9ec3d47b1f4f199509e
- SHA512 79990d706660a6b1f6b5e19a595ab8aa2ab14783ca2d8e527f108adc1764813fc374eaf177891519ec493eabfe3b23ba834607d1c1aa29d733b8e3d44ce60e47
- SSDEEP 393216:cqzK5DTEcEaIfcNWOjelWXdDrqNLYXcehylELjiDHvoZDCGNIwBT9KZzt:90dYZG9sp
- TLSH
  T15CD69D02A5A05075F4A32232B93D73798D31BE629F3585CF86507CD41F78AE2653A3AF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

defense_evasion discovery trojan
behavioral3
- Target
  payload.ps1
- Size 1KB
- SHA256 c820bdd54346fe2d4b35af9f5ff8d32956bb1fb3d01b385495effe655d7bbd44
- MD5 88db84e23f26633e5d86be6563b0b748
- SHA1 669517d35ac201d4b4bd7972b66252cb5cf05b3b
- SHA512 e401a1baa9f17d46c14d54faa2da691cbe9712a008bf06020907e0b7fe5d124b42f9d4bc02a8a5dffeb975b4f262bb2c2319e14a092f3f5eebf687c1298d69a8
- TLSH
  T1B02144002344EB7C184B6966FE5980BDF1E2E075219C0D159BBDCAC31C26649313EB94
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral4 behavioral5