General
- Target setup.exe
- Size 7.8MB
- Sample260627-hakd9ah18m
- SHA256 0fa3a867cbb45092de8a05bef621103c40580b28662c0d4964d514b5f106a8dc
- MD5 1424e9b7934d4a03cafab83c4a8371c7
- SHA1 e5a673d225d1fecf37256658cefc8d35275911b9
- SHA512 2d95c7db15167f5c093f820ceeb9763425afe1e1806c2bc165f3521f1a3c7c102a5894a53bc4809db09b7d3f2efd85f54f4518ecff01120d575fcac50378cd86
- SSDEEP 98304:vf7wCQInrje/CAVMJy1WJ/IrWb6rzm2KJXkShN6uP9vfpQAFFZRc4jLSWab8KAcN:vfn6/VSlJwvy2KFPGqxiAFbR5LKbvAe
- TLSH T18B863340A3C355B9E0550C7D1D52E6752C13AA9259FBB02A2FBCE78F0A741C6E87B8F1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 7.8MB
- SHA256 0fa3a867cbb45092de8a05bef621103c40580b28662c0d4964d514b5f106a8dc
- MD5 1424e9b7934d4a03cafab83c4a8371c7
- SHA1 e5a673d225d1fecf37256658cefc8d35275911b9
- SHA512 2d95c7db15167f5c093f820ceeb9763425afe1e1806c2bc165f3521f1a3c7c102a5894a53bc4809db09b7d3f2efd85f54f4518ecff01120d575fcac50378cd86
- SSDEEP 98304:vf7wCQInrje/CAVMJy1WJ/IrWb6rzm2KJXkShN6uP9vfpQAFFZRc4jLSWab8KAcN:vfn6/VSlJwvy2KFPGqxiAFbR5LKbvAe
- TLSH T18B863340A3C355B9E0550C7D1D52E6752C13AA9259FBB02A2FBCE78F0A741C6E87B8F1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.