General
- Target SplashtopSOS_Win_v3.8.4.0_2YTPXR2HZ2AYEU_n.exe
- Size 20.8MB
- Sample260626-pe5djsby8m
- SHA256 8933fe3fa422a2bf4c226b8f93ab38d2336d890001e5ea787617e20b996e79a5
- MD5 40d262385ec871a695b757b3b9d02433
- SHA1 892f28fd01edee657cf6a851322ee6658d2afe30
- SHA512 144e58f43f474a71a06a3764c64cdf316fa29f326bd761b6754ca262d6fedf822f72e07880430b8db3a6bd2b368d14890b03e8a738632ddbf5eafb665eae1973
- SSDEEP 393216:ljihTmDycU65ahvW1Cqn789EYGVm81fcNGnaA4g+VrmHoQ1fckBge7uWfEQg68xP:GTkycxKO789EYE5cKanLVr20JWfEQG5
- TLSH T14D272372990410A0E52E3B71E95769DC027B3E327DA976CAC99833C617377D2FE24C1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
SplashtopSOS_Win_v3.8.4.0_2YTPXR2HZ2AYEU_n.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
SplashtopSOS_Win_v3.8.4.0_2YTPXR2HZ2AYEU_n.exe
Resource
win11ltsc2024-20260618-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target SplashtopSOS_Win_v3.8.4.0_2YTPXR2HZ2AYEU_n.exe
- Size 20.8MB
- SHA256 8933fe3fa422a2bf4c226b8f93ab38d2336d890001e5ea787617e20b996e79a5
- MD5 40d262385ec871a695b757b3b9d02433
- SHA1 892f28fd01edee657cf6a851322ee6658d2afe30
- SHA512 144e58f43f474a71a06a3764c64cdf316fa29f326bd761b6754ca262d6fedf822f72e07880430b8db3a6bd2b368d14890b03e8a738632ddbf5eafb665eae1973
- SSDEEP 393216:ljihTmDycU65ahvW1Cqn789EYGVm81fcNGnaA4g+VrmHoQ1fckBge7uWfEQg68xP:GTkycxKO789EYE5cKanLVr20JWfEQG5
- TLSH T14D272372990410A0E52E3B71E95769DC027B3E327DA976CAC99833C617377D2FE24C1A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory