General
- Target mGBA-0.10.5-win64-installer.exe
- Size 15.8MB
- Sample260703-tedm2shs5m
- SHA256 edd0454b8fe69f20dc2f0b47f2cfc32a14e3848550762ffbb3d782e649669c6b
- MD5 8dacb4edc13247006019452c8daf6e22
- SHA1 72979d25676c5d4f98408dd3382d323c4d79e383
- SHA512 256ae927f1bae2556b0754afe4b21a098aec963b5264ee091c90f397e2b269855640876b4b030304b390827454847e06018c041153446203005284d15ff0772f
- SSDEEP 393216:0pwsERoXKbJ1TMaNQ1v4eJGFeUxnVcAMszhVsCwZ:0p1EXN1Aa21gjFmAptjwZ
- TLSH T147F6333FF168713EC5AA1B324473965099BBAA11A8178C1F03FC795DCFAA4301E3E656
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
mGBA-0.10.5-win64-installer.exe
Resource
win10v2004-20260513-en
23 signatures
600 seconds
Malware Config
Targets
-
- Target mGBA-0.10.5-win64-installer.exe
- Size 15.8MB
- SHA256 edd0454b8fe69f20dc2f0b47f2cfc32a14e3848550762ffbb3d782e649669c6b
- MD5 8dacb4edc13247006019452c8daf6e22
- SHA1 72979d25676c5d4f98408dd3382d323c4d79e383
- SHA512 256ae927f1bae2556b0754afe4b21a098aec963b5264ee091c90f397e2b269855640876b4b030304b390827454847e06018c041153446203005284d15ff0772f
- SSDEEP 393216:0pwsERoXKbJ1TMaNQ1v4eJGFeUxnVcAMszhVsCwZ:0p1EXN1Aa21gjFmAptjwZ
- TLSH T147F6333FF168713EC5AA1B324473965099BBAA11A8178C1F03FC795DCFAA4301E3E656
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)