General
- Target setup.exe.zip
- Size 3.3MB
- Sample260702-ql7mxscs7k
- SHA256 a1760ee80d3d77317259065c70164dfdbd2462feeaeb25e34b91d3bf8833936e
- MD5 fa1e4ff45e4149da4abb719eb3eadc1d
- SHA1 3851562423bcb2c4c58e1dd34e9c821a806abbbb
- SHA512 2ee3b967e70c5e6397ec26a3ebc390dd515a791894e7c95aa33f387d59b4fec8146d8ee6168683181c15b2ecd806b5e6adce8de6a7b9922e590299cd27c68dd1
- SSDEEP 98304:LgUxGUIKM0LzzhjYISRaqA8LW654kPX0a:EU0R0ThY1AUWfm0a
- TLSH T1FEF5331B8D007E0C5BA8C43331ED4513FFA61DF577CBEAE6200677A1E78E15E1899AA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SetupPDF_832263.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
SetupPDF_832263.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
SetupPDF_832263.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target SetupPDF_832263.exe
- Size 3.9MB
- SHA256 0312b0783810f4d9ba8a4774f0d9d3c7350a2f77a933c43531f8b0d735e52990
- MD5 bb73a8b6054e2377a8d8e2d7645d33b9
- SHA1 cf5dd4142c2aeebf85b495c0f7657d262f2a2fae
- SHA512 de2cf080cda9b17fa0d9c1ef431956958e5fbc1e5315ea1ecfe26bd6d261c0b40a238146bd53381109f702e0d8b98cd2e1896ff652fb1f0a9ce2f9aff7609783
- SSDEEP 98304:bxHXScrZn6tMyySKGsCl0qE8/egSlKEPJkYNSQdytsMwS:lScrZnPyySKGsClVEAelKENXyvwS
- TLSH T1F216F123E2CBA13FF06A4A364A77E222553B7A6069124C6697EC385CCF261D11D3F747
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.