General
- Target RimWorld.iso
- Size 656.4MB
- Sample260712-teekcaew9v
- SHA256 1d13ad041aa5487528aa4a845f5084a35d4e8d38c643bb6c7e79d3cd6b10fbf0
- MD5 7f53adb93fecd53467351bdfe8973012
- SHA1 de7b63f81f3a4293f83ae9c1a0c8671193411cef
- SHA512 554db3dbb06d54f36e5db1f4d9a0506025e56de92bc8d8090467436fe27b71bb434957104a4b047a3817279854bb81232423910f320a956ae16be1ac25b93553
- SSDEEP 12582912:tPYLQXnzoyd5rsTmiBZ0u9sbqphQVwewJM0g4odtRZDB+r5l:tgLQjX3sTmiXf9UQewJpg4odtRJBK5
- TLSH T14369337376106AACC264CEFF291952DE5E0C5CB594FC491A3E21BE9F77B909D0836382
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 3.0MB
- SHA256 1f2a3f26eadb7b4e7e1ef4efc18e59c7278f4fe4dbbd52c2a90c4b0f45ccbb4f
- MD5 3e4e89ba0bac39bc9e1ff3178c04f130
- SHA1 85d2099aa22c129fa4fc629895f2ae82ab639b33
- SHA512 8aa1cc908b76de473df4783f3b4374d83d2f391980f61908e2eb28730524a31ad5df7763aabcce67a7f9a34a0fc109998825a3eaaa80ea5e972d02378335efc2
- SSDEEP 49152:6cGoYHpHMHHjHHOwQBN6HLLFCQKayDDAwcrJxS7aST8n1/BJYr3bv9PPKfjAHrsi:5GjieVsbS5T8n15JYHZCjAHrQtS
- TLSH T1EBE522336A7A1076D5048CBC90B150955C1E2DAA24FC7C2E3DB1FD5F6BBA2C28C36667
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.