General
- Target patchApp3en_US.exe
- Size 15.1MB
- Sample260529-chpfaaay2j
- SHA256 5a244028087c9927e8c6713a28d801210e6c597f9dab635127e4f05ebc8936ab
- MD5 843601859eee6b84212b6181c8712c65
- SHA1 d41049f08b3e91bcabd2f343c1699e7e4941906c
- SHA512 2fefeaf303db5372e3d8d98a9966ee3d74e52125f4576f279f12ac9079f602a08c4d36150754cdedd1a34569513dea7d8ce9623aedde61f4faa100d0465f5067
- SSDEEP 393216:se2PlW+8NLIa3RnkfiGfl5UUDGPPiOvee6dweTkVGBZzHk0c+:92kIa3S7l56ee8wWkYzHjc+
- TLSH T1D1F6331AF84044B7FD372578C927A78D6579BDD12E2458C3B2F43D4E4F38B82266227A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
patchApp3en_US.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target patchApp3en_US.exe
- Size 15.1MB
- SHA256 5a244028087c9927e8c6713a28d801210e6c597f9dab635127e4f05ebc8936ab
- MD5 843601859eee6b84212b6181c8712c65
- SHA1 d41049f08b3e91bcabd2f343c1699e7e4941906c
- SHA512 2fefeaf303db5372e3d8d98a9966ee3d74e52125f4576f279f12ac9079f602a08c4d36150754cdedd1a34569513dea7d8ce9623aedde61f4faa100d0465f5067
- SSDEEP 393216:se2PlW+8NLIa3RnkfiGfl5UUDGPPiOvee6dweTkVGBZzHk0c+:92kIa3S7l56ee8wWkYzHjc+
- TLSH T1D1F6331AF84044B7FD372578C927A78D6579BDD12E2458C3B2F43D4E4F38B82266227A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL