b7c91c3092611b9830590b493a69a3d3af6180d6eee325308bb495886263c5f7

General

Target
fences4.zip
Size 12.3MB
Sample261102-dc7v4sea29
SHA256 b7c91c3092611b9830590b493a69a3d3af6180d6eee325308bb495886263c5f7
MD5 f25fe250ffaadf37030429ef52c5ecfd
SHA1 9a3f1564427d4ff2e39eecf17c2128ecda163086
SHA512 05d923065231f1ba3c9f7d8b0d78a5c8d54bd2b251a2cbd581cb10cf351dfa5c0f8328f88f4a46b0ce9853d1fd244c4442014f125f7feb073332a2dcb6432225
SSDEEP 196608:ncu6764nWv8ISBkpiSvf5LAGVq9doohFujCRiMWGgG9oxlyw5wYF7DdZ+VTqHlZW:nRe9kpiQfSG7omjC8U/UlT97DdZ+FqVs
TLSH
T181D633301B3B63BAC943911D9B23F1AA32E27F42154BCCDD52C6ABC8F65555BD08A07E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery upx

Malware Config

Targets

- Target
  Fences4_setup_sd.exe
- Size 12.4MB
- SHA256 6f8aa84021cc190bfc9c7efa375f6e8adfafa8bb1832ba5ea6ddc8a211ca888f
- MD5 f8db736dc6c611ff78e853e79cf749f6
- SHA1 592bb1965595331ec7cf3322be2aad6b1cd1c001
- SHA512 5d4bc2adf6f14a9d34bc01affb10dd62da2c5e1cf2e84a7e0940c17edb3e47fba04052899283eaf132dbc399b10c1eb1275a9f7e90e26e2e45a7c697f65c3328
- SSDEEP 196608:oNaqQ8EAwKAviL86vrdP2qfozoDU4WQ8J8v/l8+kUvpakbrEcQrFvB+X5abjPBLN:oAPhiL8YrkqTU4WPJ822p/srFvB+Jar
- TLSH
  T11AD63312A761D0BAE59D1035C8A183F25B723E74EB1788EB97C17DCC7870AF2A735069
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  stardock.fences.3.0.5.x64-patch.exe
- Size 388KB
- SHA256 5405e5c8a154f6219c933dba05ef3ca2d1162e666cd36b183ba8580f209c898e
- MD5 a83c862ce356ce27aa1bcad439de71ac
- SHA1 777680118a9128f5f59b3855ddeb6361b4171722
- SHA512 4e2e1039dab95ef3d27d6f1fa2e3674bd29f29c41d9bd0d9bea7cfc3dc1f7821ba013b76ca07b713852f923b4662df90a1da9180bbd14ee6442e66da6bb8e853
- SSDEEP 6144:zFbE8KURmKDa4PRwrPw/SMekXKKoGGJavRO+tGj9ZCkXleBnXr8x5JbY7ZZv:zFVKMmf4PRyP0XRoGIM2Hod8npYNp
- TLSH
  T1A18423B96EC92B5CC51219F304EBE8CA87CF2D73B1B571B9A7601D199E360A7CC8E054
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Loads dropped DLL
behavioral3 behavioral4