General
- Target wpsetup.exe
- Size 3.6MB
- Sample260428-pgwjesht71
- SHA256 150753d5978c3efb1c921844251bfd7577e66f63c7d7ba7ec27f879c330f5bb2
- MD5 214c260a5f891cc90a3bcf856e153ae5
- SHA1 369e1476300351e51ba803607c60545c28cc713a
- SHA512 5d28a8122021a2f42108edb2ffd942ecaf54d15775728c3984618060778dcbfc04be1e9c41a76a5c136c8bffaf29a8712e2813c0641b39a0b0ee48a3528ee1c4
- SSDEEP 49152:S2qlmemEowhcmY4qBzd//SMNIeXTp9/+j9MSymNG915nJDld4MyM:BqlboMcmYP5hBIITppMNGlnJIMn
- TLSH T11106330AC49D0402FA2D4DF468B051D17F869E9526CDE4A1FEC1CD6963B89B2CC3BE6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
wpsetup.exe
Resource
win10v2004-20260130-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
wpsetup.exe
Resource
win11-20260130-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target wpsetup.exe
- Size 3.6MB
- SHA256 150753d5978c3efb1c921844251bfd7577e66f63c7d7ba7ec27f879c330f5bb2
- MD5 214c260a5f891cc90a3bcf856e153ae5
- SHA1 369e1476300351e51ba803607c60545c28cc713a
- SHA512 5d28a8122021a2f42108edb2ffd942ecaf54d15775728c3984618060778dcbfc04be1e9c41a76a5c136c8bffaf29a8712e2813c0641b39a0b0ee48a3528ee1c4
- SSDEEP 49152:S2qlmemEowhcmY4qBzd//SMNIeXTp9/+j9MSymNG915nJDld4MyM:BqlboMcmYP5hBIITppMNGlnJIMn
- TLSH T11106330AC49D0402FA2D4DF468B051D17F869E9526CDE4A1FEC1CD6963B89B2CC3BE6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1