General
- Target Step 2 - Extract Setup.rar
- Size 216KB
- Sample260627-s2zy5abw2v
- SHA256 d1def14bf1688e17f34fdc30eae777abdbb5ea2c8abc59a0ec1033ba3fd9ca98
- MD5 e21b53e70356463c3f2251558cc32688
- SHA1 d80b16bd90230e041867320fdd8b85e46f3d9720
- SHA512 b4a3af524639e142b05ea3b5bb7439872a5c18983bf0f595db041b1951b8766f33ca1d60db065e8067b76f72252e3fc2ac9e971fefe70468cc8a289977ac9b31
- SSDEEP 6144:sTEyGEOYSlKDEyCVvmXFZ0bOb4sdFHO9FlKqPSndbk+:sBGdYSlFyCVvsZ0bnsdVUJSh
- TLSH T19524230D44D5267B3A515C9B6E52A7C11489C7A60F40F8CEEAEFF2FA3E9419C8E0235D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
Step 2 - Extract Setup.rar
Resource
win10ltsc2021-20260513-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target Step 2 - Extract Setup.rar
- Size 216KB
- SHA256 d1def14bf1688e17f34fdc30eae777abdbb5ea2c8abc59a0ec1033ba3fd9ca98
- MD5 e21b53e70356463c3f2251558cc32688
- SHA1 d80b16bd90230e041867320fdd8b85e46f3d9720
- SHA512 b4a3af524639e142b05ea3b5bb7439872a5c18983bf0f595db041b1951b8766f33ca1d60db065e8067b76f72252e3fc2ac9e971fefe70468cc8a289977ac9b31
- SSDEEP 6144:sTEyGEOYSlKDEyCVvmXFZ0bOb4sdFHO9FlKqPSndbk+:sBGdYSlFyCVvsZ0bnsdVUJSh
- TLSH T19524230D44D5267B3A515C9B6E52A7C11489C7A60F40F8CEEAEFF2FA3E9419C8E0235D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Adds Run key to start application