General
- Target setup.exe
- Size 7.2MB
- Sample260703-bat55aht7s
- SHA256 f938629955e32e181f0d4ca0fc93abef52cf6f9f4e64039ec08408a15d542489
- MD5 e0143068d9b91a0631aa7a73b78a1a81
- SHA1 edc9b0e70b9ee69326c5b5dc47af8c53b63132d3
- SHA512 b5131b62b6e4e2f704e04b8b773962121cf22bca5287619e1f0ddfa96d9192266a469498afc6ce683acf087af22baec61d87f6764e5caae2c7e87ac82218e481
- SSDEEP 98304:bjYVGjE5ZTaRDeBYb26B8nfi65mhfDZW9bGrAT3lOIDJmXRfijEbfzkiNKQN:bNjumDbZ6+Q9bGrE3MsSVfpES
- TLSH T118763313B783847BE9A468366909F1266E437DA406E049792EFCD30F4BB97C158F5AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 7.2MB
- SHA256 f938629955e32e181f0d4ca0fc93abef52cf6f9f4e64039ec08408a15d542489
- MD5 e0143068d9b91a0631aa7a73b78a1a81
- SHA1 edc9b0e70b9ee69326c5b5dc47af8c53b63132d3
- SHA512 b5131b62b6e4e2f704e04b8b773962121cf22bca5287619e1f0ddfa96d9192266a469498afc6ce683acf087af22baec61d87f6764e5caae2c7e87ac82218e481
- SSDEEP 98304:bjYVGjE5ZTaRDeBYb26B8nfi65mhfDZW9bGrAT3lOIDJmXRfijEbfzkiNKQN:bNjumDbZ6+Q9bGrE3MsSVfpES
- TLSH T118763313B783847BE9A468366909F1266E437DA406E049792EFCD30F4BB97C158F5AF0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.