General
- Target installer_setupper.exe
- Size 24.8MB
- Sample260625-k63ltaay2q
- SHA256 4173d5af8747c234045567152a0301d3bf917c044face571940e68e967de484e
- MD5 edfcac3de6df078a90a97996b9d0cdf8
- SHA1 8348dd2e3c5d070340211154c48a57d24dd3e5d0
- SHA512 5642d213d290f8d21ebdef01b1b2c46099260f19009e4be3b2f0712e1f556359a7956f90e412d6886347ac147e974e223315e47bdbbfc5573159542175ed9ad9
- SSDEEP 393216:hgcFRTwCx/hU/EVvuTJOWAVv8z0JpF7vEmWbdXQfM6R4Rmh3aeXiHsnvDwHcA8Ue:6cbxqKvuToWA/hv8YMc33aaggEHzF/a
- TLSH T1924733AA7B950D65F48A553E98E08B2BF3D278201BA18BCF07E80B741E670D5DD39770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
installer_setupper.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
installer_setupper.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target installer_setupper.exe
- Size 24.8MB
- SHA256 4173d5af8747c234045567152a0301d3bf917c044face571940e68e967de484e
- MD5 edfcac3de6df078a90a97996b9d0cdf8
- SHA1 8348dd2e3c5d070340211154c48a57d24dd3e5d0
- SHA512 5642d213d290f8d21ebdef01b1b2c46099260f19009e4be3b2f0712e1f556359a7956f90e412d6886347ac147e974e223315e47bdbbfc5573159542175ed9ad9
- SSDEEP 393216:hgcFRTwCx/hU/EVvuTJOWAVv8z0JpF7vEmWbdXQfM6R4Rmh3aeXiHsnvDwHcA8Ue:6cbxqKvuToWA/hv8YMc33aaggEHzF/a
- TLSH T1924733AA7B950D65F48A553E98E08B2BF3D278201BA18BCF07E80B741E670D5DD39770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.