fd10d35de7295bc107c4aeef2cfb52c857087170677f8434f5ae4f0fd6afa55b

Sharing

Copy URL Twitter E-mail

General

Target
Setup.zip
Size 32.4MB
Sample260910-ceqtyatcrh
SHA256 fd10d35de7295bc107c4aeef2cfb52c857087170677f8434f5ae4f0fd6afa55b
MD5 3c8ecb80af4a4bb38f5e7745bcbc4e4d
SHA1 ca3aab7dd24d4802f8cfd694c00733178b668c28
SHA512 f54b8861da24e42bc4d49b3c7bbc7da7859ad2511bebab15faeb6e68554ce4085c000e25f7e4280affbb44d6b7b530bf25b656113d7e6a29ad0dadae752570be
SSDEEP 786432:5DEsSBSmY0+aWK0LT3ZD1HT748GXbjmlGUmrpFnrpyQdUcx4i:9EsSBShRaWpLND1z79lqN/a2H
TLSH
T1947733113AD83909E22AB03A1511FF91915F6C9414BEC9DBFB8B0350B1DBAD14EBEC97
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  Setup.zip
- Size 32.4MB
- SHA256 fd10d35de7295bc107c4aeef2cfb52c857087170677f8434f5ae4f0fd6afa55b
- MD5 3c8ecb80af4a4bb38f5e7745bcbc4e4d
- SHA1 ca3aab7dd24d4802f8cfd694c00733178b668c28
- SHA512 f54b8861da24e42bc4d49b3c7bbc7da7859ad2511bebab15faeb6e68554ce4085c000e25f7e4280affbb44d6b7b530bf25b656113d7e6a29ad0dadae752570be
- SSDEEP 786432:5DEsSBSmY0+aWK0LT3ZD1HT748GXbjmlGUmrpFnrpyQdUcx4i:9EsSBShRaWpLND1z79lqN/a2H
- TLSH
  T1947733113AD83909E22AB03A1511FF91915F6C9414BEC9DBFB8B0350B1DBAD14EBEC97
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Setup.exe
- Size 4.5MB
- SHA256 66a1f6ccc9f869945bec8149f1af5ce5bb587d3d25c8008cfdc0bf3c0cebf9c2
- MD5 42fe4a56c232d4f65bfa7ad9eab99812
- SHA1 ff382fff460371f167ae09d2f2cf54d7d6264a0b
- SHA512 3694acd3980705493876209de679cd316f596f5255be2a0eb23971dbef18a8c54adb08f7dad42217ca855768910bba8d6f1d9d69f74429f2a64af9f9fc29c1c6
- SSDEEP 98304:+bwdaDFrhpwBP/OlsLzFmNfW6FJKxxfZA4AnyxpELRSKE+R1Y:+bUEFHGpELcoR1Y
- TLSH
  T131269DC6BF88F5E0C4A48834B916D5BDC6737C7A8A11468732D7FB1F2A37180552B92B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  auth\OGYHDshZ2Amm
- Size 698.7MB
- SHA256 3acde3ce8443535a5c72bc10fa6eaf1aea338df5cd0581e7142e6c443456ae72
- MD5 a0f6b0c0c301d054f90ed6a5d369c864
- SHA1 f6d632d2776e6116120abf930b54506aff95fe2d
- SHA512 bc089d4db7718aaff0b2f5f59fde8993d7b38ad7e45602d24943d1884b7c32e66b8f8da92df27151e51f6c662da2c96bc250b2baa636ecf0b71a3ae8b26bb63f
- SSDEEP 786432:51ilKTiLfTSL7AylurFVSKFpSCgGYsJMKOsnVc5ozHO:5I8TibTSL7A2uJVS0gsJMSyWO
- TLSH
  T14379028AF5F4A0BDC96FC03C44440C27D33C79A6A713876B19A5C9D968B34E91BE6F18
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
behavioral5 behavioral6
- Target
  vcruntime140.dll
- Size 116KB
- SHA256 f843cd00d9aff9a902dd7c98d6137639a10bd84904d81a085c28a3b29f8223c1
- MD5 699dd61122d91e80abdfcc396ce0ec10
- SHA1 7b23a6562e78e1d4be2a16fc7044bdcea724855e
- SHA512 2517e52f7f03580afd8f928c767d264033a191e831a78eed454ea35c9514c0f0df127f49a306088d766908af7880f713f5009c31ce6b0b1e4d0b67e49447bfff
- SSDEEP 1536:KqvQFDdwFBHKaPX8YKpWgeQqbekRG7MP4ddbsecbWcmpCGa3QFzFtjXzp:KqvQFDUXqWn7CkRG7YecbWb9a3kDX9
- TLSH
  T16AC37C4573A802B7D62EC274C1E25E46EB75B5418770ABCF03B589AA0F13BE1AE3D345
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  version.dll
- Size 124KB
- SHA256 00f6b47ed70472f6b7cf95b8cdeb33d254906d780148df205320a0f7d25298e4
- MD5 410af86d672a4886ff7ecae3c8c0c5a7
- SHA1 e2308e96a4f97972dc3f382b8e23f776e5206aac
- SHA512 96695a111688b87f6c7073878a0f80190ca2fc1b5ec7b91f9e8f10cc2aae9a3b9b5a34596242dd9210f409502aa927f77f9a3404c354f8e95de5034800fb83a1
- SSDEEP 3072:PArsEFFJFC9pVpcGgD4H3zFOSwCYnn6iouckVPxIiTON4F:PArsqF7cpMdDC3JO6A
- TLSH
  T1D2C34B1BB6B5507BE26A8938C4530A05DF72BC918BA0ABDF07900DDA1E637D49F3DB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10