Overview
overview
4Static
static
1drw_google...40.exe
windows10-2004-x64
4drw_google...40.exe
windows11-21h2-x64
4$TEMP/down...er.exe
windows10-2004-x64
3$TEMP/down...er.exe
windows11-21h2-x64
3$TEMP/down...ap.dll
windows10-2004-x64
3$TEMP/down...ap.dll
windows11-21h2-x64
3$TEMP/down...xe.exe
windows10-2004-x64
3$TEMP/down...xe.exe
windows11-21h2-x64
3$TEMP/down...up.exe
windows10-2004-x64
3$TEMP/down...up.exe
windows11-21h2-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-1.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3$TEMP/down...-0.dll
windows10-2004-x64
3Analysis
- max time kernel
149s - max time network
143s - platform
windows10-2004_x64 - resource
win10v2004-20250619-en - resource tags
arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system - submitted
08/05/2026, 12:18
Static task
static1
Behavioral task
behavioral1
Sample
drw_google_trial_installer.5283840.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral2
Sample
drw_google_trial_installer.5283840.exe
Resource
win11-20250619-en
Behavioral task
behavioral3
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/EDownloader.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral4
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/EDownloader.exe
Resource
win11-20260130-en
Behavioral task
behavioral5
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/AliyunWrap.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral6
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/AliyunWrap.dll
Resource
win11-20260130-en
Behavioral task
behavioral7
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/AliyunWrapExe.exe
Resource
win10v2004-20260130-en
Behavioral task
behavioral8
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/AliyunWrapExe.exe
Resource
win11-20260130-en
Behavioral task
behavioral9
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/InfoForSetup.exe
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/InfoForSetup.exe
Resource
win11-20260130-en
Behavioral task
behavioral11
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-console-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral12
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-datetime-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral13
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-debug-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral14
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-errorhandling-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral15
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-file-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral16
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-file-l1-2-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral17
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-file-l2-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral18
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-handle-l1-1-0.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral19
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-heap-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral20
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-interlocked-l1-1-0.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral21
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-libraryloader-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral22
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-localization-l1-2-0.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral23
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-memory-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral24
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-namedpipe-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral25
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-processenvironment-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral26
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-processthreads-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral27
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-processthreads-l1-1-1.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral28
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-profile-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral29
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-rtlsupport-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral30
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-string-l1-1-0.dll
Resource
win10v2004-20250619-en
Behavioral task
behavioral31
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-synch-l1-1-0.dll
Resource
win10v2004-20260130-en
Behavioral task
behavioral32
Sample
$TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/api-ms-win-core-synch-l1-2-0.dll
Resource
win10v2004-20260130-en
General
- Target $TEMP/downloader_easeus/2.0.0/2ad_google_trial/aliyun/InfoForSetup.exe
- Size 98KB
- Sample260508-pgldfsb17k
- SHA256 8f7bbe0d37dc8b57c9877e2febaa334e1d29bae93715f526d536e7dafb0b5dfd
- MD5 c9d1d09c06b684aea2f61685ebefabf3
- SHA1 99ee650735fd065139995c2d6d1d0c29e6f0aff3
- SHA512 1911cb8fc0b2cb424e496027a9348e4e043a8adc0a5cd511412ec67fd0f620c7132ae2ce51d3482de578b322d340c2bbc5cd4ef872d756dd278d7b6d1bad2aef
- SSDEEP 3072:OCtrgl5JKj4voShF1nIKtmfmKPbHxzdHeXm:lgTLl18xHt
- TLSH T1D4A38D10B5C1D831E573193678B4E9A58A3EF9111FB09EEB239C012A4F356D06A36AF7
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language InfoForSetup.exe