General
- Target LegacyUpdate-1.13.2.exe
- Size 577KB
- Sample260824-pgzabaxeje
- SHA256 2608d42e5f9f5d1f80b4969af6156cc9c87791586f5f73ae7839b2acafc12f86
Score
5/10
Malware Config
Targets
-
- Target LegacyUpdate-1.13.2.exe
- Size 577KB
- SHA256 2608d42e5f9f5d1f80b4969af6156cc9c87791586f5f73ae7839b2acafc12f86
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
-
- Target $PLUGINSDIR/LegacyUpdateNSIS.dll
- Size 86KB
- SHA256 9796de7e5a318796a6a2ef52b037f1c711c44cea19eae99d1476798ee215df32
Score4/10 -
- Target $PLUGINSDIR/NSxfer.dll
- Size 77KB
- SHA256 26673ec67ce0f333367abb101e82bc1f6a168e445d2d3694160d07ad2f970133
Score3/10 -
- Target $PLUGINSDIR/Patches.ini
- Size 42KB
- SHA256 c164a65ef29294d7d049894961cb156522e43256b1e88b056bac54125a87ad11
Score1/10 -
- Target $PLUGINSDIR/System.dll
- Size 44KB
- SHA256 9e716f6677a90cda3fe546db70c1d43923a4839462a16d68553f99edb13aa501
Score3/10 -
- Target $PLUGINSDIR/modern-header.bmp
- Size 103KB
- SHA256 7ddfc6c65244326459b4149cc40c8bfb09cabf3c5390535d687e93c1b335609a
Score1/10 -
- Target LegacyUpdate.dll
- Size 164KB
- SHA256 86b56af1f68cf7f2e70faf823aee6f076111ae84994676a34617ebf04f389dde
Score4/10