General
- Target setup.exe
- Size 5.4MB
- Sample260708-ave19shv5p
- SHA256 ff0f4848cd4f63247a776462b87709bdc5856fa1e0499a37564b0c23a5f157b0
- MD5 eb7e264ae5aba90fdade6fa770e7dbcc
- SHA1 cdf21c6161a6d7f16b9b6200d71019488f6a7df5
- SHA512 808ab9e37f76173f6c6c3d2bea67b4cc5f99dacbbeeca954d5773fdb44547e8c45ebd219bacd3b56f98984db3e4cc9fd7deca46af60a6d6e1cf1b2d008373b8d
- SSDEEP 98304:5f7wCQInrje/CAVMJy1WGsF3bgEjIwbT41dPHeV9gZYcdJWMJN:5fn6/VSlGC3bMYqdPHDbWMz
- TLSH T121463301A3931839E86408385D73D068AD57FAF61AD526652EF8DF8F07791C37DBB2A0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.4MB
- SHA256 ff0f4848cd4f63247a776462b87709bdc5856fa1e0499a37564b0c23a5f157b0
- MD5 eb7e264ae5aba90fdade6fa770e7dbcc
- SHA1 cdf21c6161a6d7f16b9b6200d71019488f6a7df5
- SHA512 808ab9e37f76173f6c6c3d2bea67b4cc5f99dacbbeeca954d5773fdb44547e8c45ebd219bacd3b56f98984db3e4cc9fd7deca46af60a6d6e1cf1b2d008373b8d
- SSDEEP 98304:5f7wCQInrje/CAVMJy1WGsF3bgEjIwbT41dPHeV9gZYcdJWMJN:5fn6/VSlGC3bMYqdPHDbWMz
- TLSH T121463301A3931839E86408385D73D068AD57FAF61AD526652EF8DF8F07791C37DBB2A0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.