General
- Target setup_2020.14.24.exe
- Size 51.3MB
- Sample261007-h4tvsadw3z
- SHA256 18ffabf9da2e38501fcb8326e0963d6e9dab7484f1546223a08ed1cf8a57c767
- MD5 b891d1944e7c939f98ecf3d0b37e0949
- SHA1 b7e60ced07a89bf85361368e34bd07ed3b1b1020
- SHA512 46c28a9d1874d1601647e703f9419b715e941bf51faabe43b608153a274fd24de827f12ffcbdbd6506cb1f2493c9bbca2e1abc1cf658d7907ba7d058ac8530bf
- SSDEEP 1572864:cHS1sOSAgr2aFrOHvZ7ifiwGHZ6HH/iaTfO:cyC5AgrlFrcZ7iad56nVfO
- TLSH T17DC733C57E21F40BC940FCB69417AE3D5BAA1C9BB9570663ACE27BA0D17321DCC18978
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target setup_2020.14.24.exe
- Size 51.3MB
- SHA256 18ffabf9da2e38501fcb8326e0963d6e9dab7484f1546223a08ed1cf8a57c767
- MD5 b891d1944e7c939f98ecf3d0b37e0949
- SHA1 b7e60ced07a89bf85361368e34bd07ed3b1b1020
- SHA512 46c28a9d1874d1601647e703f9419b715e941bf51faabe43b608153a274fd24de827f12ffcbdbd6506cb1f2493c9bbca2e1abc1cf658d7907ba7d058ac8530bf
- SSDEEP 1572864:cHS1sOSAgr2aFrOHvZ7ifiwGHZ6HH/iaTfO:cyC5AgrlFrcZ7iad56nVfO
- TLSH T17DC733C57E21F40BC940FCB69417AE3D5BAA1C9BB9570663ACE27BA0D17321DCC18978
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory