General
- Target VapeV4.rar
- Size 13.4MB
- Sample260706-nscd9aet4w
- SHA256 1ce0d36a7f7f024655d24e91cd1eca70ea5de9f09af904cf75f875d7329fd9fe
- MD5 d15685843537aafe7f855320f728cbe0
- SHA1 22a353b78b98b1f1bf6dba9da8af0763ae9653ed
- SHA512 97da6c041c1713ebf891a1169c8418801be65a8d0e096721e7f04571724c2e2ba468943142a4174871dcb85a56601f686b1d675a95b8ea6170b396b3aeb7b584
- SSDEEP 393216:nF9WCuMe5Y/J1hN6XFRIp/VBAY3eY37HsLQIetWf+5hn:Ful5SJ1hA1Sp/7Ac334Ut9Tn
- TLSH T1ECE633F5EBB27694C3C4CBF71E3461ADF8098EA7569DB5934388B48821C881975CDF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
VapeV4.rar
Resource
win10v2004-20260513-en
23 signatures
900 seconds
Behavioral task
behavioral2
Sample
VapeV4.rar
Resource
win11ltsc2024-20260629-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target VapeV4.rar
- Size 13.4MB
- SHA256 1ce0d36a7f7f024655d24e91cd1eca70ea5de9f09af904cf75f875d7329fd9fe
- MD5 d15685843537aafe7f855320f728cbe0
- SHA1 22a353b78b98b1f1bf6dba9da8af0763ae9653ed
- SHA512 97da6c041c1713ebf891a1169c8418801be65a8d0e096721e7f04571724c2e2ba468943142a4174871dcb85a56601f686b1d675a95b8ea6170b396b3aeb7b584
- SSDEEP 393216:nF9WCuMe5Y/J1hN6XFRIp/VBAY3eY37HsLQIetWf+5hn:Ful5SJ1hA1Sp/7Ac334Ut9Tn
- TLSH T1ECE633F5EBB27694C3C4CBF71E3461ADF8098EA7569DB5934388B48821C881975CDF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.