General
- Target AtlasToolkitSetup.exe
- Size 3.9MB
- Sample260620-3jmaesat3p
- SHA256 09384283de9a6a18a864ba36bc2c0ba0996395fbc4a4f9c4ccbbcd98f606acc8
- MD5 83947b843016dc051ae6279fdf8b8a99
- SHA1 2892ebe9613064e61c33747ad41647f34c37104c
- SHA512 989784e8cd91c37e2dee99829a056e10c825c7a433d3ad0f6556e0ca8c17079b07dd61e341f82536bdb581ca6d373964250d2c1f5f8a662f4a3d9e0dc253088c
- SSDEEP 49152:CuI5h5jefFAh4Zfq4iK9kLO4+8ZK8LVAzMqJpeScpm8NWCr6ij1OAgsoV3IHQEOB:C5/gQ4Zfq4D9vJ8LVAzVJkE87jssoVJB
- TLSH T1A416013FB28B753EE06E5A357A72E110583B7E61A5124C12A7E4D89CCF351B01E3E786
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
AtlasToolkitSetup.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target AtlasToolkitSetup.exe
- Size 3.9MB
- SHA256 09384283de9a6a18a864ba36bc2c0ba0996395fbc4a4f9c4ccbbcd98f606acc8
- MD5 83947b843016dc051ae6279fdf8b8a99
- SHA1 2892ebe9613064e61c33747ad41647f34c37104c
- SHA512 989784e8cd91c37e2dee99829a056e10c825c7a433d3ad0f6556e0ca8c17079b07dd61e341f82536bdb581ca6d373964250d2c1f5f8a662f4a3d9e0dc253088c
- SSDEEP 49152:CuI5h5jefFAh4Zfq4iK9kLO4+8ZK8LVAzMqJpeScpm8NWCr6ij1OAgsoV3IHQEOB:C5/gQ4Zfq4D9vJ8LVAzVJkE87jssoVJB
- TLSH T1A416013FB28B753EE06E5A357A72E110583B7E61A5124C12A7E4D89CCF351B01E3E786
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.