General
- Target Undertale [Build 4279148].rar
- Size 125.6MB
- Sample261014-1x73yaaw3j
- SHA256 269668dae4c9747ad78d994a8cda615093832ea7d1093e9066af451b44897281
- MD5 b001a5f787821b434c107daa9e17d7aa
- SHA1 600dc0a16e1cd5ade56e9de25bfb92cdbc3add73
- SHA512 313e02a01ad3f76b4a68ba35a949f7920226435fb13f2e19c145a4c9a985678d99b0fcb37919a8a16cf1ced3b23e5721996629a63a7574e3d704fee29e353e3d
- SSDEEP 3145728:GgQ476tLYKiP4Lw3sZuGwKxzXzxrZlfEhLbALwqB3pRz0:GgLWtcK6/MwKRDxFl8hPALwqBjz0
- TLSH T1105833C1B7CC0A725761A9910F2FEE45FF06A38DF5B81800C6D81189D9E58DA4B7E6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Undertale [Build 4279148]/setup_undertale_1.08_(18328).exe
- Size 126.7MB
- SHA256 21fbcab3c652d5af9efe57454d60d5a5057773e1c234ed16ae14233724502b44
- MD5 69a1054bcf85084cc4bc33e332f1844d
- SHA1 a3db1a7c5a07ea07c31d40ab4c7685215ac4f170
- SHA512 f57df05d2d5db04cb48a1d72070ac5d76ae29620cca314817fbfbb30d42c2150115ac510acb216095115c210fe2eee80575ffc78a36fd455e72e4de9492b4f81
- SSDEEP 3145728:WSHIqNWvNc0rn+0fslfSob+5Framz9LQMj5jMgQN7:WytNAfcSob2NaoLQ+7c7
- TLSH T187583306A48BCA71D215B3BD14934056BE5FE91ECAFE19206EE9D48D30F627118BD3E3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.