General
- Target VisualCppRedist_AIO_x86_x64.exe
- Size 30.7MB
- Sample260703-d9dcrsfz3n
- SHA256 6045a79e7120f67ab7ba33e7783a2ee07950fcdb2906d6facf06ddc514b8a529
- MD5 a5c171cd12a25b5fffd0b8224047df4e
- SHA1 aaf339ef092faad239fc2eb8e1174229267dbd0b
- SHA512 4df3abefde53e4542536dc4743d44445d5348b803842b2bb0a13e7ae8d0943fb4aa49b16b8460b298f463a0331db337ff47fc76f5a7c4413e51ac980790af3ba
- SSDEEP 786432:NVtNXoJzaVswqsPK1YkJnneSxFpk5u3Vs4GMas42:NVSaqwqL3xFpkE3VeY42
- TLSH T18D6733B2451A912CFBE071F5090AF0E172EDF8B9E8D5CC5275F57889E6AE4109DEA03C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VisualCppRedist_AIO_x86_x64.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
VisualCppRedist_AIO_x86_x64.exe
Resource
win11ltsc2024-20260629-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target VisualCppRedist_AIO_x86_x64.exe
- Size 30.7MB
- SHA256 6045a79e7120f67ab7ba33e7783a2ee07950fcdb2906d6facf06ddc514b8a529
- MD5 a5c171cd12a25b5fffd0b8224047df4e
- SHA1 aaf339ef092faad239fc2eb8e1174229267dbd0b
- SHA512 4df3abefde53e4542536dc4743d44445d5348b803842b2bb0a13e7ae8d0943fb4aa49b16b8460b298f463a0331db337ff47fc76f5a7c4413e51ac980790af3ba
- SSDEEP 786432:NVtNXoJzaVswqsPK1YkJnneSxFpk5u3Vs4GMas42:NVSaqwqL3xFpkE3VeY42
- TLSH T18D6733B2451A912CFBE071F5090AF0E172EDF8B9E8D5CC5275F57889E6AE4109DEA03C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory