General
- Target swflash.cab
- Size 225KB
- Sample260708-wvnt3afw2v
- SHA256 eea074db3f86fed73a36d9e6c734af8080a4d2364e817eecd5cb37cb9ec9dc0b
- MD5 b3e138191eeca0adcc05cb90bb4c76ff
- SHA1 2d83b50b5992540e2150dfcaddd10f7c67633d2c
- SHA512 82b4c76201697d7d25f2e4f454aa0dd8d548cdfd3ebfa0dd91845536f74f470e57d66a73750c56409510d787ee2483839f799fef5d5a77972cd4435a157a21a4
- SSDEEP 6144:vaSusyjE8qpy5T52Advnoa7lsyxrXGbUG0y75HkF:vrRyjRb59xTtXGbmy9e
- TLSH T1DA34124CCF19687016BA8F3DB065D6F842D1F78C4609C6950E3FEA94065E7E31D943AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
FP_AX_CAB_INSTALLER64.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target FP_AX_CAB_INSTALLER64.exe
- Size 757KB
- SHA256 c8c8cff5dc0a3f205e59f0bbfe30b6ade490c10b9ecc7043f264ec67ef9b6a11
- MD5 47f240e7f969bc507334f79b42b3b718
- SHA1 8ec5c3294b3854a32636529d73a5f070d5bcf627
- SHA512 10999161970b874db326becd51d5917f17fece7021e27b2c2dfbee42cb4e992c4d5dbeac41093a345ad098c884f6937aa941ec76fb0c9587e9470405ecb67161
- SSDEEP 12288:7is1VxmuejWRd56dN/hDeNh6jUVyTkTcAAAAAAAAAAAAAAAXAbAAAAAAAAAAAAAm:7is1Vxmueq6eb6jPTkG9
- TLSH T175F48411A3F99EA1C5A239F84563A7D507B93F5A0E3AC1ED5F833D4CD834A4349386E2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.