General
- Target WeMod Fortune Mill Setup.exe
- Size 155KB
- Sample260701-3efxvafx7l
- SHA256 ef941647682bc1b7189ee394ff3417ff42f9d078355e40d8eb6039a23f67f177
- MD5 4dc2fb693d79b0c99a3d90d666aa2427
- SHA1 b5feacfe66ceaa020ab1d1caa3000aad56365979
- SHA512 ade6abf2aa36f91e55d5d02c18935e9197e35b67e4f5ef5edf5cb9cb6160b9817107c1ad73cd58237d13afa052d901bf2a37868700534115ffb983f286d2e890
- SSDEEP 3072:w0x45QyUyhaEtHZeO/deV4ILlCI+40OHHBpF:145rUwaEtHUx4SF
- TLSH T11BF3AED9E3E815BEE6BB8DBA4C351DB005B7AC421CD5ED5A1D8070A84A33354243BB6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WeMod Fortune Mill Setup.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target WeMod Fortune Mill Setup.exe
- Size 155KB
- SHA256 ef941647682bc1b7189ee394ff3417ff42f9d078355e40d8eb6039a23f67f177
- MD5 4dc2fb693d79b0c99a3d90d666aa2427
- SHA1 b5feacfe66ceaa020ab1d1caa3000aad56365979
- SHA512 ade6abf2aa36f91e55d5d02c18935e9197e35b67e4f5ef5edf5cb9cb6160b9817107c1ad73cd58237d13afa052d901bf2a37868700534115ffb983f286d2e890
- SSDEEP 3072:w0x45QyUyhaEtHZeO/deV4ILlCI+40OHHBpF:145rUwaEtHUx4SF
- TLSH T11BF3AED9E3E815BEE6BB8DBA4C351DB005B7AC421CD5ED5A1D8070A84A33354243BB6F
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.