General
- Target pdfgear_setup_v2.1.16.exe_
- Size 135.0MB
- Sample260701-hsf5jsgv6n
- SHA256 c91bd6c06467d9e9e14d9af8013471ff026f2a93946d6b8c2a410199365ce439
- MD5 7fe6872e06c1912966aebea94f3bc238
- SHA1 1e48a6ea487996e9fa52b3b2e118d3fdb64d6313
- SHA512 f5eba09cb57bb3b83c9bc2cf43f0d0da95d52b34645b2bbfbe3cd17bff2e1ab04ecb0b8e217f6a6c4b7ead81c45916860f894828bd92f725be081cc2aee4d774
- SSDEEP 3145728:qMz1hDG9GtAmg3GHZAKqtdkWrHPnBi7i/RYYfKl+:q2ny9sAL3OARd7Bi2/RYYb
- TLSH T18768332F7B186A2DC4E5CA3041B1881899BBBD94817F890626F27D2CCFBF7711E36495
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
pdfgear_setup_v2.1.16.exe
Resource
win10v2004-20260513-en
22 signatures
600 seconds
Malware Config
Targets
-
- Target pdfgear_setup_v2.1.16.exe_
- Size 135.0MB
- SHA256 c91bd6c06467d9e9e14d9af8013471ff026f2a93946d6b8c2a410199365ce439
- MD5 7fe6872e06c1912966aebea94f3bc238
- SHA1 1e48a6ea487996e9fa52b3b2e118d3fdb64d6313
- SHA512 f5eba09cb57bb3b83c9bc2cf43f0d0da95d52b34645b2bbfbe3cd17bff2e1ab04ecb0b8e217f6a6c4b7ead81c45916860f894828bd92f725be081cc2aee4d774
- SSDEEP 3145728:qMz1hDG9GtAmg3GHZAKqtdkWrHPnBi7i/RYYfKl+:q2ny9sAL3OARd7Bi2/RYYb
- TLSH T18768332F7B186A2DC4E5CA3041B1881899BBBD94817F890626F27D2CCFBF7711E36495
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates processes with tasklist
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1