General
- Target GeForceNOW-release.exe
- Size 170.0MB
- Sample260620-vptyfsf14r
- SHA256 709b9d242f9ac88b2c6ebaf195cbeadb2d3cd7c968342a22f483a2dea919762c
- MD5 87509f664609aff801925e0ff2eac37e
- SHA1 5a69fb9ad3a79b759918c41c04484a54c766f872
- SHA512 2085ebba27febf5b4f708a5098d2bbeff372f86c511229f69c13f98bd0d1fe61afff0ef28309617cd834eed40c356c08d88e185fab820cb6815390cb198fdb24
- SSDEEP 3145728:sv2++R6B2kUVOGe7/yNFMty0/KIFSB9CzUbivqpdOIlAbrwkHLLQKOb4ybFOd:svTUAFzKFM4UKTQfvqErvrcfbFI
- TLSH T130883320748D5DBAC0C721767D386E6752C89D710B2758C32398BE2CBBB95E34A351EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Static task
static1
Behavioral task
behavioral1
Sample
GeForceNOW-release.exe
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
GeForceNOW-release.exe
Resource
win10ltsc2021-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral3
Sample
GeForceNOW-release.exe
Resource
win11-20260513-en
17 signatures
900 seconds
Behavioral task
behavioral4
Sample
GeForceNOW-release.exe
Resource
win11ltsc2024-20260618-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target GeForceNOW-release.exe
- Size 170.0MB
- SHA256 709b9d242f9ac88b2c6ebaf195cbeadb2d3cd7c968342a22f483a2dea919762c
- MD5 87509f664609aff801925e0ff2eac37e
- SHA1 5a69fb9ad3a79b759918c41c04484a54c766f872
- SHA512 2085ebba27febf5b4f708a5098d2bbeff372f86c511229f69c13f98bd0d1fe61afff0ef28309617cd834eed40c356c08d88e185fab820cb6815390cb198fdb24
- SSDEEP 3145728:sv2++R6B2kUVOGe7/yNFMty0/KIFSB9CzUbivqpdOIlAbrwkHLLQKOb4ybFOd:svTUAFzKFM4UKTQfvqErvrcfbFI
- TLSH T130883320748D5DBAC0C721767D386E6752C89D710B2758C32398BE2CBBB95E34A351EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2