General
- Target GIMP.zip
- Size 21.2MB
- Sample260909-wn7ctsdb63
- SHA256 41a8d3dc48fdb0c4eb614358009b0f428bc35804e28c5a4f020f6f28ebfe6823
Score
7/10
Malware Config
Targets
-
- Target 1750ac47204cc6d284552da50d3cfab4.exe
- Size 19KB
- SHA256 a6967e7a3c2251812dd6b3fa0265fb7b61aadc568f562a98c50c345908c6e827
Score3/10 -
- Target gimp-setup.exe
- Size 19.4MB
- SHA256 26f779a9b418212f869bc9115fef55eca170be16287cc0fbc02533eb49356b49
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target unins000.exe
- Size 4.3MB
- SHA256 be0a651e57d0b904432004ccfe33296cb70f7d9a92faf732f4a4d8d2b5a09235
Score3/10