General
- Target CSP_504w_setup.exe
- Size 464.0MB
- Sample260623-gfx2vsav5k
- SHA256 27749e99fdf92634a621ace485805eb53001985afc2a73ad20576ae7b8f7c3e6
- MD5 66374c164b0f6be8ebcd2e3046d9b97e
- SHA1 1c54779460993fc46e0e8d0a65e24c6a43531d70
- SHA512 9d3bae440802658f43bfb3fe841bf0677c005a474330dd59bccd34398b671ca8ca74d3d98482e1fc0d25adbcff1cbf20c7f8c2e56a4dbd7ed29ae9f79138bfdc
- SSDEEP 12582912:IQ7rPNKIlQm60dUypnOE0lfDPTF/pkZ2VF0U1h2Pc8xf:IQ7JKIGm601ifDPTF/m40XcU
- TLSH T107393317A5C4451EE5BB4231EEBF0D52BA713C236721888BB1D0FF686CF12C1B967A16
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
CSP_504w_setup.exe
Resource
win10v2004-20260513-en
15 signatures
300 seconds
Behavioral task
behavioral2
Sample
CSP_504w_setup.exe
Resource
win11ltsc2024-20260618-en
14 signatures
300 seconds
Malware Config
Targets
-
- Target CSP_504w_setup.exe
- Size 464.0MB
- SHA256 27749e99fdf92634a621ace485805eb53001985afc2a73ad20576ae7b8f7c3e6
- MD5 66374c164b0f6be8ebcd2e3046d9b97e
- SHA1 1c54779460993fc46e0e8d0a65e24c6a43531d70
- SHA512 9d3bae440802658f43bfb3fe841bf0677c005a474330dd59bccd34398b671ca8ca74d3d98482e1fc0d25adbcff1cbf20c7f8c2e56a4dbd7ed29ae9f79138bfdc
- SSDEEP 12582912:IQ7rPNKIlQm60dUypnOE0lfDPTF/pkZ2VF0U1h2Pc8xf:IQ7JKIGm601ifDPTF/m40XcU
- TLSH T107393317A5C4451EE5BB4231EEBF0D52BA713C236721888BB1D0FF686CF12C1B967A16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.