General
- Target Setup - DDTank Global.zip
- Size 71.3MB
- Sample260815-ng33tswsdz
- SHA256 f4e9237c95c6256f39e7f9acafd665e7bf1f72ce358c1bfc31881e0876eacc9a
- MD5 9c19137a8145ba61b8aefa7a9b1b2b8a
- SHA1 69a7a31dfc2209bff954de14ae1bdb98aa7cab51
- SHA512 4a9cae62630f5e8ad1e34c21a6887f84e988b09f761b73817c1ca699bf26dc3e3f471adb280905d948fbc5406e8513059a129721e3c4d57da0149c77c19df56e
- SSDEEP 1572864:9AnBwJRVo78S5fPTVmtulSzHlvFRHVFLdy+DEHF2SyxBF1:inBwJR0nq2c9Fl7bQlUfF1
- TLSH T13FF73362CF88DDB13759B7D4A5009DEAEDFB059B6A3433F422358B85FD648D002A846F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Setup - DDTank Global.zip
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Setup - DDTank Global.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DDTank Global.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral4
Sample
DDTank Global.exe
Resource
win11ltsc2024-20260709-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target Setup - DDTank Global.zip
- Size 71.3MB
- SHA256 f4e9237c95c6256f39e7f9acafd665e7bf1f72ce358c1bfc31881e0876eacc9a
- MD5 9c19137a8145ba61b8aefa7a9b1b2b8a
- SHA1 69a7a31dfc2209bff954de14ae1bdb98aa7cab51
- SHA512 4a9cae62630f5e8ad1e34c21a6887f84e988b09f761b73817c1ca699bf26dc3e3f471adb280905d948fbc5406e8513059a129721e3c4d57da0149c77c19df56e
- SSDEEP 1572864:9AnBwJRVo78S5fPTVmtulSzHlvFRHVFLdy+DEHF2SyxBF1:inBwJR0nq2c9Fl7bQlUfF1
- TLSH T13FF73362CF88DDB13759B7D4A5009DEAEDFB059B6A3433F422358B85FD648D002A846F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target DDTank Global.exe
- Size 71.7MB
- SHA256 1f74a45ce478c23e0da7ffa7dd5916fed9bdfc26da84159fce6c396afd955d4b
- MD5 fa154773b65f63538502e3cd11ecf067
- SHA1 1ed6a413545f21195ee6145c0e3123d091ac13e4
- SHA512 337146de62f8c30a07b6df89161c79b5e1f5e2762fcaaf7263e101eabd10834a2daaf60766488769c70764bcdbf023af67dff25783388b784d1ad1a94156af7e
- SSDEEP 1572864:chivfGdTdeZaI5v/rFsnoJ8zfXvlbzn/lfgmJW7TC8Cf7V8:cgvfGdTkHMwqflftl0vijV8
- TLSH T189F73323E78C673DE16AA7B55522DDD19C7F6962643A48F396F00C4CDE2D0900A7EE0B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.