General
- Target install.exe
- Size 173.9MB
- Sample260711-eqpr5abs9q
- SHA256 71473b4a29db4cbae31c2df4e63a7383e86e789b4c8e0e557ef6ef63f944047b
- MD5 b4c86fb34ccb212df14debaa618e41e8
- SHA1 4ddf0c8d6c5b04dc17f2920c4ddea0cdce78f7ed
- SHA512 7d380e6a0a967e0f9971620858f1a1e8dcea8b6b80e47add7928c4506db9078cf63bf28340afcca58a8ec25d2f35c4d6916f2007a28971cc0e193196705f8747
- SSDEEP 3145728:I7v5nrodpUlO6FwmYVyRjHrmNV/y6Zyz4oMjtltC81pjVYrP+/ffVKL2z4T5T/43:Iv5rDO6FwmYzD9Z+pMjtlP/SrP+Xftmg
- TLSH T1F8983380FDC742F6D89B1E74213DB73F873A5512CA08D21BE7A04C25FDB67525AEA10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
install.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
install.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target install.exe
- Size 173.9MB
- SHA256 71473b4a29db4cbae31c2df4e63a7383e86e789b4c8e0e557ef6ef63f944047b
- MD5 b4c86fb34ccb212df14debaa618e41e8
- SHA1 4ddf0c8d6c5b04dc17f2920c4ddea0cdce78f7ed
- SHA512 7d380e6a0a967e0f9971620858f1a1e8dcea8b6b80e47add7928c4506db9078cf63bf28340afcca58a8ec25d2f35c4d6916f2007a28971cc0e193196705f8747
- SSDEEP 3145728:I7v5nrodpUlO6FwmYVyRjHrmNV/y6Zyz4oMjtltC81pjVYrP+/ffVKL2z4T5T/43:Iv5rDO6FwmYzD9Z+pMjtlP/SrP+Xftmg
- TLSH T1F8983380FDC742F6D89B1E74213DB73F873A5512CA08D21BE7A04C25FDB67525AEA10A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Downloads MZ/PE file
-
Drops desktop.ini file(s)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of NtSetInformationThreadHideFromDebugger