General
- Target gimp-3.2.6-setup.exe
- Size 181.5MB
- Sample261002-1j4tcsv17m
- SHA256 9337cccbc01d4098ee7a3dab215b3afbe6ece99c5287c92441d6f12cf541ebca
- MD5 24ff558d32537f07fb5025e9e43b75c4
- SHA1 75946f62486998acd006c38d9d0e181194e52982
- SHA512 bc5fa3cd320bf66c65e3fe94122947d22ee01eaf2ca0db3b4bede0567277adb2f69152084a910bc3e33214104650f49c69a9f23ba369692b779b72a2899f97ca
- SSDEEP 3145728:K/R7bfmDprSh8UwxpMTHTwP16QoxbCVkMPb1XQwFREM1ZR/WNEJm4tKd5AQ7AeHK:K5Aprg8UypaLQAgksbphEM170EJgbAvL
- TLSH T1629833D711AB9929E4BECAB26CFE9961573F5E50E1051C6635E0E46CCF2B034393A03E
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target gimp-3.2.6-setup.exe
- Size 181.5MB
- SHA256 9337cccbc01d4098ee7a3dab215b3afbe6ece99c5287c92441d6f12cf541ebca
- MD5 24ff558d32537f07fb5025e9e43b75c4
- SHA1 75946f62486998acd006c38d9d0e181194e52982
- SHA512 bc5fa3cd320bf66c65e3fe94122947d22ee01eaf2ca0db3b4bede0567277adb2f69152084a910bc3e33214104650f49c69a9f23ba369692b779b72a2899f97ca
- SSDEEP 3145728:K/R7bfmDprSh8UwxpMTHTwP16QoxbCVkMPb1XQwFREM1ZR/WNEJm4tKd5AQ7AeHK:K5Aprg8UypaLQAgksbphEM170EJgbAvL
- TLSH T1629833D711AB9929E4BECAB26CFE9961573F5E50E1051C6635E0E46CCF2B034393A03E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.