General
- Target Spotify1.2.92.148.exe
- Size 178.0MB
- Sample260701-19ft8aft5l
- SHA256 52873eb63e46423d3a203c6561e0f7f976d3cb4f3e5283c77e90c6bbd76a0345
- MD5 1b140c16ba6ede1bf0f816cc172f8913
- SHA1 e6c0f25938f79aa2fbb5cab5d10b3568ef7da60a
- SHA512 50647e6fd23e09b69dd69df77f01ce6c8e9ca86d1efc076ea3c93049d8b99bbef67f5030691714b66926a5a1dccdc017aaa9541abc8b421521d236c097626bea
- SSDEEP 3145728:no6x2uttT54KtXy7xIE8oipgd4Q4achTTMphpCkd3BhEjATyjf3cfPZXegnEOa:L2u35LExIE8BpxhspzCk9nEjATyTUwxl
- TLSH T19698337F7113193DC276A7378A7386554833261AC927C91D1FF84C5A9F636A02EB3A23
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Spotify1.2.92.148.exe
Resource
win10ltsc2021-20260513-en
26 signatures
150 seconds
Malware Config
Targets
-
- Target Spotify1.2.92.148.exe
- Size 178.0MB
- SHA256 52873eb63e46423d3a203c6561e0f7f976d3cb4f3e5283c77e90c6bbd76a0345
- MD5 1b140c16ba6ede1bf0f816cc172f8913
- SHA1 e6c0f25938f79aa2fbb5cab5d10b3568ef7da60a
- SHA512 50647e6fd23e09b69dd69df77f01ce6c8e9ca86d1efc076ea3c93049d8b99bbef67f5030691714b66926a5a1dccdc017aaa9541abc8b421521d236c097626bea
- SSDEEP 3145728:no6x2uttT54KtXy7xIE8oipgd4Q4achTTMphpCkd3BhEjATyjf3cfPZXegnEOa:L2u35LExIE8BpxhspzCk9nEjATyTUwxl
- TLSH T19698337F7113193DC276A7378A7386554833261AC927C91D1FF84C5A9F636A02EB3A23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.