General
- Target setup.exe
- Size 21KB
- Sample260705-cw8fbact6n
- SHA256 af80e935030690a09a333cc6c648766c501c160e4e4d6a41dc15130e660187a8
- MD5 7b3649ac3718373318715c76a3bdd32c
- SHA1 7e8cd12b53b300804bdfe31b3119d3f5d570cb3c
- SHA512 b7cde39db00a207dfd50ffcfa3aefb3c5f32b707b189604de9931ccdb90e473a34bcb3858d877abcdf1ecb5ac183d629c5a0dfb5e58d4eb96aa57fe97dd90855
- SSDEEP 384:3kO0gUsnOMyU4bfTiZjIbPWRmTHpFmkLPaQCW:3czsncogCcHpFZLPaHW
- TLSH T19FA21A4EB36314FDC923C031E6EB6372F5F1F922065A1B2E1644C23A6F60A64977D58A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 21KB
- SHA256 af80e935030690a09a333cc6c648766c501c160e4e4d6a41dc15130e660187a8
- MD5 7b3649ac3718373318715c76a3bdd32c
- SHA1 7e8cd12b53b300804bdfe31b3119d3f5d570cb3c
- SHA512 b7cde39db00a207dfd50ffcfa3aefb3c5f32b707b189604de9931ccdb90e473a34bcb3858d877abcdf1ecb5ac183d629c5a0dfb5e58d4eb96aa57fe97dd90855
- SSDEEP 384:3kO0gUsnOMyU4bfTiZjIbPWRmTHpFmkLPaQCW:3czsncogCcHpFZLPaHW
- TLSH T19FA21A4EB36314FDC923C031E6EB6372F5F1F922065A1B2E1644C23A6F60A64977D58A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application