General
- Target SafeguardPDFViewer_v3.exe
- Size 50.6MB
- Sample260619-sr7afsav2s
- SHA256 af23c631df2357f85558c3a3413a9e0b4ae06a0c1e67ae3d757e46696f49dc7c
- MD5 58eaba1c4ef27b32a7cbf8984d82276f
- SHA1 90c5aed51ae0e5b6d9748963e26e93aeef3678ea
- SHA512 7b43ba14a2950e35bef7b51a66a21af70cf7ba9d72b21d64889918bd9c108dfb327d3411e782ee6b60e49dcedcc24aee937dbb6d3e3b30356eda79bfb5b3ef58
- SSDEEP 786432:2k/KNVALxLA8PxUMK/a37pbo0W+oa7bb2ZF7+1gWwr+7/S9ZCahZ/0:UuxLAeOaLpbHoa7bb2ZF+1gJq/S9swC
- TLSH T1DEC733532290D536E51D0DBA084DD5E24A7A7E318BB5D2C39FC65D083E701E2BE3AE4B
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
SafeguardPDFViewer_v3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SafeguardPDFViewer_v3.exe
- Size 50.6MB
- SHA256 af23c631df2357f85558c3a3413a9e0b4ae06a0c1e67ae3d757e46696f49dc7c
- MD5 58eaba1c4ef27b32a7cbf8984d82276f
- SHA1 90c5aed51ae0e5b6d9748963e26e93aeef3678ea
- SHA512 7b43ba14a2950e35bef7b51a66a21af70cf7ba9d72b21d64889918bd9c108dfb327d3411e782ee6b60e49dcedcc24aee937dbb6d3e3b30356eda79bfb5b3ef58
- SSDEEP 786432:2k/KNVALxLA8PxUMK/a37pbo0W+oa7bb2ZF7+1gWwr+7/S9ZCahZ/0:UuxLAeOaLpbHoa7bb2ZF+1gJq/S9swC
- TLSH T1DEC733532290D536E51D0DBA084DD5E24A7A7E318BB5D2C39FC65D083E701E2BE3AE4B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.