General
- Target HC2Setup.exe
- Size 631KB
- Sample260706-a54glsgy71
- SHA256 6a06b2ba1a32b703d65f43d49ddaa8e74d8f5add21a8ab04aa0044937a5a50c5
- MD5 f96a73b23464366e4158620b10fa52c5
- SHA1 1b048d127670ea9c113c3582c7d2bfde2bc4b32a
- SHA512 2639aa5b6b954d6492fb1116309f0810f68b758717f7b0158107296a515c1b326cdf166590e173a00a92d14dcc80e7aa2e9f4495806890f530b79d17e12ec6b3
- SSDEEP 12288:qr3ZBIRB5Ij7QaClHwJFispW/tB7/x+irBvMb4AcKoUvTUfT2uk0pKBLMYN9UUvq:2ZB2B+j+wJF+/H7x+irBuocTvuPpKBAZ
- TLSH T15ED42302B39244B7D8819B709C7D63BBE03DFF4516B0A09E8B980C1A5C75B52B95EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
HC2Setup.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target HC2Setup.exe
- Size 631KB
- SHA256 6a06b2ba1a32b703d65f43d49ddaa8e74d8f5add21a8ab04aa0044937a5a50c5
- MD5 f96a73b23464366e4158620b10fa52c5
- SHA1 1b048d127670ea9c113c3582c7d2bfde2bc4b32a
- SHA512 2639aa5b6b954d6492fb1116309f0810f68b758717f7b0158107296a515c1b326cdf166590e173a00a92d14dcc80e7aa2e9f4495806890f530b79d17e12ec6b3
- SSDEEP 12288:qr3ZBIRB5Ij7QaClHwJFispW/tB7/x+irBvMb4AcKoUvTUfT2uk0pKBLMYN9UUvq:2ZB2B+j+wJF+/H7x+irBuocTvuPpKBAZ
- TLSH T15ED42302B39244B7D8819B709C7D63BBE03DFF4516B0A09E8B980C1A5C75B52B95EB4F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.