General
- Target DBDPakInstallerGUIv2.2.1.exe
- Size 3.3MB
- Sample260712-1f3rwsa18x
- SHA256 835c59ca79ebdd6ef5e878b500fd62a5674c50ea9b5aa2faf4c3b0bf4f60b689
- MD5 20a14021d169d7b9f4fbcdbed742c967
- SHA1 6e4ce3ed1b7cfa794822604f893e43ea934d17ce
- SHA512 f89a6e2635dcf84a851f729f491f567c118a76dd419ce72856d1d74b53adf858dd42ff0868ee252b3a49ee4843c078061b09a6304b5f8a123a3fe54f1ecf720d
- SSDEEP 49152:WjzKx7ua4JoeW4bedyGkaNVfWHTb8PktN8yJt1NLKnCxN7QnxbC4Xqm6/5E2E5on:oY3YbqRPfm+ktNpTLKC0nxxqH5EvW
- TLSH T1C3F5F1285CD6456FCBF44DBC42C6893FA47B479177E387D1EFAA043A0FA568889F04A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DBDPakInstallerGUIv2.2.1.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target DBDPakInstallerGUIv2.2.1.exe
- Size 3.3MB
- SHA256 835c59ca79ebdd6ef5e878b500fd62a5674c50ea9b5aa2faf4c3b0bf4f60b689
- MD5 20a14021d169d7b9f4fbcdbed742c967
- SHA1 6e4ce3ed1b7cfa794822604f893e43ea934d17ce
- SHA512 f89a6e2635dcf84a851f729f491f567c118a76dd419ce72856d1d74b53adf858dd42ff0868ee252b3a49ee4843c078061b09a6304b5f8a123a3fe54f1ecf720d
- SSDEEP 49152:WjzKx7ua4JoeW4bedyGkaNVfWHTb8PktN8yJt1NLKnCxN7QnxbC4Xqm6/5E2E5on:oY3YbqRPfm+ktNpTLKC0nxxqH5EvW
- TLSH T1C3F5F1285CD6456FCBF44DBC42C6893FA47B479177E387D1EFAA043A0FA568889F04A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1