General
- Target setup.exe
- Size 1.3MB
- Sample260701-n3sh8afs8w
- SHA256 33a3e3590f9e0dad78b5b1132ff1e1eed2d034efd193b2e22d8f46e0b8e67c23
- MD5 02fad2c7cc1069677c5bfc6939193166
- SHA1 bc208c47be1b0a2ae546c363c47482063026db9e
- SHA512 55275bef5d2314b1c6b9a54f6d78b2fbf23a40b2f7c7cca3982416850be49f81fed7aefc9fa36ca70d8cf6b3b6d5c024e60843e5f94c340150e964ce9d5180de
- SSDEEP 24576:sMjhsJxOSFHdbA5JDtoyHIRLQdCX2GG86AQsFwhpZY7Qp1y/PnqTyI:PWOS/oDto4IsG7J6AvFw+7Q/qqGI
- TLSH T1EC552313F7D34071F5A54138DDA58048AD277EA928D5253B2CF9CB4F0ABE6C70C7AAA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 1.3MB
- SHA256 33a3e3590f9e0dad78b5b1132ff1e1eed2d034efd193b2e22d8f46e0b8e67c23
- MD5 02fad2c7cc1069677c5bfc6939193166
- SHA1 bc208c47be1b0a2ae546c363c47482063026db9e
- SHA512 55275bef5d2314b1c6b9a54f6d78b2fbf23a40b2f7c7cca3982416850be49f81fed7aefc9fa36ca70d8cf6b3b6d5c024e60843e5f94c340150e964ce9d5180de
- SSDEEP 24576:sMjhsJxOSFHdbA5JDtoyHIRLQdCX2GG86AQsFwhpZY7Qp1y/PnqTyI:PWOS/oDto4IsG7J6AvFw+7Q/qqGI
- TLSH T1EC552313F7D34071F5A54138DDA58048AD277EA928D5253B2CF9CB4F0ABE6C70C7AAA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.