General
- Target Adobe_AVX2_Patch_v1.0.1.exe
- Size 35.5MB
- Sample260707-wgaqaabs21
- SHA256 1a1cf33e9ba6661c1b215fcfdaec30084d420ba077e16df758e54c66c68af8b4
- MD5 734cfa85c26279279cf331f7404d32b8
- SHA1 641630f2fc104b6fbd83cbd1c28d5661453625c4
- SHA512 8f87551e9ed6f861249a2118d2fca35a632879bbb99d7bb7052a488ede451c460cf7dacac82aa2836c9243795e5c0005bfea521ab74f405046c211ac6d6b82d4
- SSDEEP 786432:dD2Shqr7N9feCQjtKVyfQEQ0xxZCEZZaiYOa8wuIhrLFaOoJHPl+H+MQ2po89:dDvMrx1eE4IEzBZZaibwugrcOoxPlWLp
- TLSH T1F887332096B021FCD8E5E2714ECA9999E2B33C940B10D5834EA1F9B76F371E4A53D772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Adobe_AVX2_Patch_v1.0.1.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Adobe_AVX2_Patch_v1.0.1.exe
Resource
win11ltsc2024-20260706-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target Adobe_AVX2_Patch_v1.0.1.exe
- Size 35.5MB
- SHA256 1a1cf33e9ba6661c1b215fcfdaec30084d420ba077e16df758e54c66c68af8b4
- MD5 734cfa85c26279279cf331f7404d32b8
- SHA1 641630f2fc104b6fbd83cbd1c28d5661453625c4
- SHA512 8f87551e9ed6f861249a2118d2fca35a632879bbb99d7bb7052a488ede451c460cf7dacac82aa2836c9243795e5c0005bfea521ab74f405046c211ac6d6b82d4
- SSDEEP 786432:dD2Shqr7N9feCQjtKVyfQEQ0xxZCEZZaiYOa8wuIhrLFaOoJHPl+H+MQ2po89:dDvMrx1eE4IEzBZZaibwugrcOoxPlWLp
- TLSH T1F887332096B021FCD8E5E2714ECA9999E2B33C940B10D5834EA1F9B76F371E4A53D772
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.