General
- Target VisualStudioSetup.exe
- Size 5.4MB
- Sample260707-2vejaafw2z
- SHA256 6b2bebdbda4c6e3cc6dbeff5c3cfd6badc83a431f0dbf35f258502615f24a3f4
- MD5 596822473ae31b1f43f1dce114a53843
- SHA1 d39e857b4dbd878a5372b61934248c1b5a44a41a
- SHA512 efe076e42bc09dacd491dccae2fe4317bce3ffdb393bdb194411d3614d9d64f2c832eca52da0bb3fe220c3f0a479d4142b112a9e2d7ea1171a3fae85f26d0339
- SSDEEP 98304:Lw1Dk/VfGruWGsAg0sWUrCl7/mrtYbG0OgeMZELMMz6YTj:LwcVfGqWBFbrBtYGzg9OLMMuY/
- TLSH T15A4633237886D43BE9BB5436196886B61B3FA5101F38F5DF33D58569AE30AC0AB34707
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
VisualStudioSetup.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
VisualStudioSetup.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target VisualStudioSetup.exe
- Size 5.4MB
- SHA256 6b2bebdbda4c6e3cc6dbeff5c3cfd6badc83a431f0dbf35f258502615f24a3f4
- MD5 596822473ae31b1f43f1dce114a53843
- SHA1 d39e857b4dbd878a5372b61934248c1b5a44a41a
- SHA512 efe076e42bc09dacd491dccae2fe4317bce3ffdb393bdb194411d3614d9d64f2c832eca52da0bb3fe220c3f0a479d4142b112a9e2d7ea1171a3fae85f26d0339
- SSDEEP 98304:Lw1Dk/VfGruWGsAg0sWUrCl7/mrtYbG0OgeMZELMMz6YTj:LwcVfGqWBFbrBtYGzg9OLMMuY/
- TLSH T15A4633237886D43BE9BB5436196886B61B3FA5101F38F5DF33D58569AE30AC0AB34707
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.