300dad43a65810d55185c1cd80edb2ae2d47ab41ba4391a7e7fa5f0e1d439b0a

General

Target
Nouveau_Archive_WinRAR_2.zip
Size 2.2MB
Sample261104-xp378stygv
SHA256 300dad43a65810d55185c1cd80edb2ae2d47ab41ba4391a7e7fa5f0e1d439b0a
MD5 74a614cfbc0c91e6bdf7883ee64a6f5e
SHA1 5745c9461cb50a71db736abe6c4298fe9938b425
SHA512 e26c15c4b125c0ad25a61f417ec77171568f0c28f48c60c8253c38a6b1d8e0d7d3b7f69ae10ac2469bef8d43e43db1c00304874e8b01dc47c3625870423ca7ca
SSDEEP 49152:qwy2Dt5nlH/JL4ysPw/8CgBQasL9j9qhM1/44u:SGPlsi8CgB+l9qhMTu
TLSH
T1F9B533BB4C21766A874CC73A43A8DD7A1CA6318FCB4D44D81E948714DA04CA7ADB77E3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  Default.ttf
- Size 37KB
- SHA256 fe204a8ee8802b311f8e93550833669c204155353d527b9ee5c991b46ba78c01
- MD5 d221140abbf98d4bf2c97f90bdca3bac
- SHA1 e601cb6724e5f684cfc9fa88cac071d34ad68f45
- SHA512 d25c646bafd8b4e009d61fec501a487b65c649aa6adbfb9f3fa122b54a79dc20fce4ab0210e12d2cdf31162bc6eeceb9ff18456786e6c89380ca93d8620f2e88
- SSDEEP 768:WzQTe1+BXuZlScJ4XoRb+nDHJ6qT6ixyN0ZBopZfFo:0D+BXeScYoRb+LgqT66yNABoH9o
- TLSH
  T181037D0BF7C6CB6DE3138F384E60736AE5A4FA3E5B1B835782045D35B9862944C4DA98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2
- Target
  Keycheck.ttf
- Size 39KB
- SHA256 f779e2d561278bf8b60e4177e39d93b20b403883b42636c896110949a00c029e
- MD5 5ecd6439ecc182a512dbc84b54e3f366
- SHA1 bc8fbffdd749e96c728e77ddb615994d4740d678
- SHA512 5ac3d6213bf4bd31632c9fb4e5e052fa5d0d27902a2a396b81ce51ea36aeee3b9727d2873e18b986057336eb39568e473a915040dae8cae8f6afc239d73d3f5e
- SSDEEP 768:3B0VjxNe88+Mr1V1GaVYI0bmJOeHamVwlbZb3crXu8zYNH+bDHCXB5Oefg1Lob:eHNeprxfOeHx+hQ50+bGRMeh
- TLSH
  T1AC03E825BBB6F20080750EBA5CF446727B4BD3152DB38B5E5A6B9ED1B93B0C3BD44608
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  Korsakoff GUI.exe
- Size 2.8MB
- SHA256 7de2cea01011401058b4f54580befae1d07fb46bf0698b42328bb1cba2ef8dad
- MD5 a4e2e16dfa42f160cc55892aaa68287e
- SHA1 e58480d4c09e7b652b3bde2639a1382cbf4d9146
- SHA512 d8d40841140fa617d7188288a6067aeb44e49397b8153dad1889e1ae52a27edae2233b5c3e7c80331f7336d4c21d7c6448fa12c2964c6d3bb2bc91022fed6a6a
- SSDEEP 49152:TG23OcQc2f7Qh4g1RAtgtMR4X1N+S+wt0K2bnUUm3PcYf6GQwXo42G23OcQcrGwH:TG2+c12DQhPRAcu4+SVeGHv6+Xo42G27
- TLSH
  T1F2D51242BF408AD2C4148A7CD85B93252771BD97DA83834B2298BBAF78B36D0754F7D4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10
- Drops file in System32 directory
behavioral5 behavioral6