General
- Target CentralPOS-Setup-v1.2.0.exe
- Size 23.7MB
- Sample260522-pe5djsax3m
- SHA256 fe17b711416ac68543ad21e484af7076553e09acbc5617a7c8769d8ddd27adec
- MD5 b0718acc1d88253e33a696b0864fe288
- SHA1 10afaf528a6b32c664ea4a0b4103171c6a567c51
- SHA512 3087de957d23530657e6baa26f5a35d5212f8314e8a97942345e678771e771140f4bd1e8ec1db5cf88c62253f4f08d894e610d030952a0b9a5f5e77405b2e721
- SSDEEP 393216:8Q/3fsL1Db8fmQsjnpSVayu33nMxogFUPTDVH9iM1qMHvPerbViNlG60KXTal/qL:5/vy5ofmQ+pSVayu33cGbDVdiMlne/gb
- TLSH T1E347333FB287A53EE06D1A3A3A72A515593BBE6165038C4297F4F44CCF354B02D3E686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
CentralPOS-Setup-v1.2.0.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
CentralPOS-Setup-v1.2.0.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target CentralPOS-Setup-v1.2.0.exe
- Size 23.7MB
- SHA256 fe17b711416ac68543ad21e484af7076553e09acbc5617a7c8769d8ddd27adec
- MD5 b0718acc1d88253e33a696b0864fe288
- SHA1 10afaf528a6b32c664ea4a0b4103171c6a567c51
- SHA512 3087de957d23530657e6baa26f5a35d5212f8314e8a97942345e678771e771140f4bd1e8ec1db5cf88c62253f4f08d894e610d030952a0b9a5f5e77405b2e721
- SSDEEP 393216:8Q/3fsL1Db8fmQsjnpSVayu33nMxogFUPTDVH9iM1qMHvPerbViNlG60KXTal/qL:5/vy5ofmQ+pSVayu33cGbDVdiMlne/gb
- TLSH T1E347333FB287A53EE06D1A3A3A72A515593BBE6165038C4297F4F44CCF354B02D3E686
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.