User tags
Assigned on submission by the user, not by sandbox detections.
source:configra
mode:dynamic
General
- Target Claude_Setup.exe
- Size 6.6MB
- Sample260429-nt6pgsa17s
- SHA256 0a05366f4769c9d2e31db635ff3a4c11efaa9b6b3b6ba3fe8e9848212341b2a1
- MD5 2f66e73818fb099d735ac88ce702b8ee
- SHA1 f16cb26e9fa76c47b21dfa57b56150f1deda1d52
- SHA512 03b2161bd3460d4071f7ef11b9e2dc41150f42729e7825d65fb74b96957dbf7e70d5fc07c432f41c01ef7788d70b46db99d806007ac5760a556f084c520b96f3
- SSDEEP 49152:E5B+AwmBHCswnh1EkkjgP13jknxlYtzHGpCVvjS+UKAbpjZIvYNOYAjUkeBs1wK/:EVBiprltIxVgvmOlpP+CNRE8
- TLSH T19C665A07E8A515E5C0AEE1358A62A293BB717C485F3127D72F90F7382F76BD06AB5310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Claude_Setup.exe
Resource
win10v2004-20260130-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Claude_Setup.exe
Resource
win11-20260130-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Claude_Setup.exe
- Size 6.6MB
- SHA256 0a05366f4769c9d2e31db635ff3a4c11efaa9b6b3b6ba3fe8e9848212341b2a1
- MD5 2f66e73818fb099d735ac88ce702b8ee
- SHA1 f16cb26e9fa76c47b21dfa57b56150f1deda1d52
- SHA512 03b2161bd3460d4071f7ef11b9e2dc41150f42729e7825d65fb74b96957dbf7e70d5fc07c432f41c01ef7788d70b46db99d806007ac5760a556f084c520b96f3
- SSDEEP 49152:E5B+AwmBHCswnh1EkkjgP13jknxlYtzHGpCVvjS+UKAbpjZIvYNOYAjUkeBs1wK/:EVBiprltIxVgvmOlpP+CNRE8
- TLSH T19C665A07E8A515E5C0AEE1358A62A293BB717C485F3127D72F90F7382F76BD06AB5310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory