General
- Target EpicInstaller-20.1.0.exe
- Size 83.3MB
- Sample260710-h7ycdagv2t
- SHA256 4d676d3182a2ab98e9c522eb55144e49eb7344f455c56795fcc42b96824ee021
- MD5 966b4d6e49d44ff61ebcdf51245bcb87
- SHA1 4e28bda1ec6d494526baaff41aa3f20b3cd7bbcf
- SHA512 172e2aa291e44a94db2a2cc15fcdbf44f990198b2e096d1d4117b0e8558309c8b1442b3fc9814a3fa54f4137a770ce51f0a59ad0f13428d5ea8eed51aa0e31f4
- SSDEEP 1572864:5sdU3OPmGezv2j1o0cRLSvA5KX0FlPJ710IThX0gAcjIh6wtzeN/63Uho66YUYYK:5RdOBp8WvFKhB1dTVMcjMqbSK
- TLSH T18E18332EBCA15D43D56D9B3B43C283029F676878BB1403459EE5981D3DAA2E4533FAC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
EpicInstaller-20.1.0.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
EpicInstaller-20.1.0.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target EpicInstaller-20.1.0.exe
- Size 83.3MB
- SHA256 4d676d3182a2ab98e9c522eb55144e49eb7344f455c56795fcc42b96824ee021
- MD5 966b4d6e49d44ff61ebcdf51245bcb87
- SHA1 4e28bda1ec6d494526baaff41aa3f20b3cd7bbcf
- SHA512 172e2aa291e44a94db2a2cc15fcdbf44f990198b2e096d1d4117b0e8558309c8b1442b3fc9814a3fa54f4137a770ce51f0a59ad0f13428d5ea8eed51aa0e31f4
- SSDEEP 1572864:5sdU3OPmGezv2j1o0cRLSvA5KX0FlPJ710IThX0gAcjIh6wtzeN/63Uho66YUYYK:5RdOBp8WvFKhB1dTVMcjMqbSK
- TLSH T18E18332EBCA15D43D56D9B3B43C283029F676878BB1403459EE5981D3DAA2E4533FAC3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.