General
- Target setupglx.exe
- Size 2.7MB
- Sample260710-gzedvsfx2v
- SHA256 9c1c4b043577300a8ebd0b9840d887ac7e0dde4dcdb99e98ea19129e2646c501
- MD5 c34c7d88242724f72a33c9bc7cc9a1d5
- SHA1 d368d83cd1920023635f346725ab77304e28de33
- SHA512 8984810b88d54c75bc2d6f9f9b2408c366188382e798ace21f02ee3a17110a68d46ab336c4a9d0cc4bbde1748afb8de4998f6b9313f041ad83f5afb62653bbba
- SSDEEP 49152:PHbnTVI3cw8JMdRaUy+02/uJb+X74NLCIJGomemFaLESMBHCXwiI6iIG1K:DTfw2M7fy+0Vi74sIJGv9kAizFGg
- TLSH T12ED5338998E2E9F2DA0246F0C5C3B76B5227BC94E9109517FBF17DB3B8B35B1320A154
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setupglx.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
setupglx.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Behavioral task
behavioral3
Sample
$_3_.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
$_3_.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target setupglx.exe
- Size 2.7MB
- SHA256 9c1c4b043577300a8ebd0b9840d887ac7e0dde4dcdb99e98ea19129e2646c501
- MD5 c34c7d88242724f72a33c9bc7cc9a1d5
- SHA1 d368d83cd1920023635f346725ab77304e28de33
- SHA512 8984810b88d54c75bc2d6f9f9b2408c366188382e798ace21f02ee3a17110a68d46ab336c4a9d0cc4bbde1748afb8de4998f6b9313f041ad83f5afb62653bbba
- SSDEEP 49152:PHbnTVI3cw8JMdRaUy+02/uJb+X74NLCIJGomemFaLESMBHCXwiI6iIG1K:DTfw2M7fy+0Vi74sIJGv9kAizFGg
- TLSH T12ED5338998E2E9F2DA0246F0C5C3B76B5227BC94E9109517FBF17DB3B8B35B1320A154
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
- Target $_3_
- Size 1.8MB
- SHA256 8b64258249dc34d1d7c68324735323190c949f3d9766122676bf7051afc3310d
- MD5 27dbebefac44d6947bc6fcc5e7b662da
- SHA1 872239b048d6b9f889e3f538b8c909c99f182790
- SHA512 bde18aed3250028a6977e555cf094f26be3b31f2053a5e7ec0e2b576255418dcaa453a9e2e8a84c22461fd049128204a6696a1604200cce5674d4878698cb1e3
- SSDEEP 49152:pnGcxOUi39yHebZTcNHTXpSliV2s1/ctYmwYDdd:pNYymZZP
- TLSH T193858C92F682C031D5A10572D078D6FE807A6F74E321A9E753DC3EA629319C1E939F72
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.