General
- Target vs_30day_trial_10021_en-us.exe
- Size 9.5MB
- Sample260705-p2ereacv9t
- SHA256 869d482c81a3619bb1650e415c6793bf4ce7d65e6f06462459913c81ab25db5c
- MD5 79e221680e3838e91b343eeac58c6601
- SHA1 8bb6e8c3ed35735028230b853792d1643b527eab
- SHA512 7a28c430ef7ad435eaa2b5074033214a7f4d6b235a67f56ce5b211c348a31b07c489f399d81e620f4d7649a39d4655a02c44f99f8a7a1a2b2c0e2778c84a7aa5
- SSDEEP 196608:0f4tT/8Z7Mxt/I2U0mSVehtrX5FZX1QFszfjENZzQKxDD:0f28Y/vCZ1OcLIfJ
- TLSH T1EBA6338EDE713D56CC3AC1F571D0A926ACA0097211D4C6FAE1B94C968B730C83FA7675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vs_30day_trial_10021_en-us.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
vs_30day_trial_10021_en-us.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target vs_30day_trial_10021_en-us.exe
- Size 9.5MB
- SHA256 869d482c81a3619bb1650e415c6793bf4ce7d65e6f06462459913c81ab25db5c
- MD5 79e221680e3838e91b343eeac58c6601
- SHA1 8bb6e8c3ed35735028230b853792d1643b527eab
- SHA512 7a28c430ef7ad435eaa2b5074033214a7f4d6b235a67f56ce5b211c348a31b07c489f399d81e620f4d7649a39d4655a02c44f99f8a7a1a2b2c0e2778c84a7aa5
- SSDEEP 196608:0f4tT/8Z7Mxt/I2U0mSVehtrX5FZX1QFszfjENZzQKxDD:0f28Y/vCZ1OcLIfJ
- TLSH T1EBA6338EDE713D56CC3AC1F571D0A926ACA0097211D4C6FAE1B94C968B730C83FA7675
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Drops file in System32 directory