e25f5a8b0657fb07aa325eec690cf797cda0ead15031841406cc945e03888bd1

General

Target
SK-Games-Setup.exe
Size 68.7MB
Sample260823-rh3egaae29
SHA256 e25f5a8b0657fb07aa325eec690cf797cda0ead15031841406cc945e03888bd1
MD5 544cb15adc4ffc931b0af3fefa68ae4d
SHA1 6d5b48cce2d318ed5355b2781ae37bbf4a22ace9
SHA512 e65e336aab080aa27d50b9fe4eda3c969fd87098f4bb2fa2c64b5c8df12fb8b90bc11aa3d5c4595f3d8d4102c127824af6e1392ed4c846e119531169729c5553
SSDEEP 1572864:We5kJofZWDiRYeEILL3WJ7G7Jny86SY/AQmWbrg:W2hWGRzLL3KG7b6RAQL
TLSH
T144F733B641DD30AAF85BDD759286EDAC01FA4C704CAAA1B2C67CB9153B230543B4FD78
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SK-Games-Setup.exe
- Size 68.7MB
- SHA256 e25f5a8b0657fb07aa325eec690cf797cda0ead15031841406cc945e03888bd1
- MD5 544cb15adc4ffc931b0af3fefa68ae4d
- SHA1 6d5b48cce2d318ed5355b2781ae37bbf4a22ace9
- SHA512 e65e336aab080aa27d50b9fe4eda3c969fd87098f4bb2fa2c64b5c8df12fb8b90bc11aa3d5c4595f3d8d4102c127824af6e1392ed4c846e119531169729c5553
- SSDEEP 1572864:We5kJofZWDiRYeEILL3WJ7G7Jny86SY/AQmWbrg:W2hWGRzLL3KG7b6RAQL
- TLSH
  T144F733B641DD30AAF85BDD759286EDAC01FA4C704CAAA1B2C67CB9153B230543B4FD78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
- Command and Scripting Interpreter: PowerShell
  Run Powershell to get system information.
  execution
behavioral1 behavioral2
- Target
  SK Games.exe
- Size 130.0MB
- SHA256 460630d9f46be880ee06b2ef9162120c1d2f2f2cfd607d4b886ac2197c43ee0b
- MD5 a0387b39e1f339263414d04d6f17fde1
- SHA1 54c3938675836a9898ad789aa93b2393ad488a32
- SHA512 368f773d12d95ac199145b235a31707e48521db7d23043c00e12fa8bed8f8b2da72259d6b8780ede1f51071b9eac9aec9e0c495c5ca982ccb8785ad9067eb968
- SSDEEP 1572864:tcbpqKkZruFcijLKkgSTXLlvFyQRBlkZ/ugaz23xlh2CmI7KRvg56itpw54mqzJr:L+/e/ug3A9I7KRv4XNi/SAARx5
- TLSH
  T1B2589E01B49260B9DC4731B3346EB73D5924464787394EDBAA8C7CC47FAD2D12ABE34A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery defense_evasion execution spyware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Command and Scripting Interpreter: PowerShell
  Using powershell.exe command.
  execution
behavioral3 behavioral4