General
- Target setup_shadows_of_doubt_42.03.2_(64bit)_(90367).exe
- Size 629.1MB
- Sample260705-xj3phsax7q
- SHA256 85a2358fed8cc1cd2e5af584f88d1736e994279b193c0089bd318d6a8d560aab
- MD5 260b8d45f5eec5f509c718f4864e5465
- SHA1 52fd5417e1b11e4c7c644e0c8555436d457fbcde
- SHA512 075f7ff509c115290b4b7638bbf806d17242268f4e52205438a3ae80f947b55f5b04c3c2a30f8f134aaeff4d4bfa34eecf8534f69dbdd4cacd1a5a4f8be586c5
- SSDEEP 12582912:iCm9kD2u7duSo64KN2Ve21RpPpk+bWTcl44QJUnMD5vxyXf+k4SncBuuRE1giE5q:U9kD2IuSD4Oop/B6+II44QCnMhxyX2vi
- TLSH T123693376E848B89CC73D1E3054F61C8DA3EA417F15DA297D1836E388A8F77D38A0562D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup_shadows_of_doubt_42.03.2_(64bit)_(90367).exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target setup_shadows_of_doubt_42.03.2_(64bit)_(90367).exe
- Size 629.1MB
- SHA256 85a2358fed8cc1cd2e5af584f88d1736e994279b193c0089bd318d6a8d560aab
- MD5 260b8d45f5eec5f509c718f4864e5465
- SHA1 52fd5417e1b11e4c7c644e0c8555436d457fbcde
- SHA512 075f7ff509c115290b4b7638bbf806d17242268f4e52205438a3ae80f947b55f5b04c3c2a30f8f134aaeff4d4bfa34eecf8534f69dbdd4cacd1a5a4f8be586c5
- SSDEEP 12582912:iCm9kD2u7duSo64KN2Ve21RpPpk+bWTcl44QJUnMD5vxyXf+k4SncBuuRE1giE5q:U9kD2IuSD4Oop/B6+II44QCnMhxyX2vi
- TLSH T123693376E848B89CC73D1E3054F61C8DA3EA417F15DA297D1836E388A8F77D38A0562D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory