General
- Target Uninstalr_Portable.exe
- Size 7.5MB
- Sample260712-v2aekset6q
- SHA256 1c98209a99489f4ef564a7bf113aec375e10f61253a97a2997ffa776df5d0345
- MD5 e97ad4e2a983e505eab2b4af8844ab8e
- SHA1 bb5ad919d8132c4cd542837fefa4cf5a0d460b2d
- SHA512 e7dce5c4b4369c4d0a3dad192a139b4fb7a9c2b80e728080cc19e48d1b9a6227c166fc9bc78169357db756b8ee7cae275a3ca4c0edde2f70355b4615ac6175a7
- SSDEEP 196608:zmPSpC2GyXGEy+I7gXaA9/t29yMbA3urrGRFaWbrb5u/llx:zmPaXO+WehEF8+rGRZVellx
- TLSH T1CF763341B70B34A7D43D863C7346ED49D7A13FB982C417A82A4EF9586472B62E8BC11F
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Uninstalr_Portable.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target Uninstalr_Portable.exe
- Size 7.5MB
- SHA256 1c98209a99489f4ef564a7bf113aec375e10f61253a97a2997ffa776df5d0345
- MD5 e97ad4e2a983e505eab2b4af8844ab8e
- SHA1 bb5ad919d8132c4cd542837fefa4cf5a0d460b2d
- SHA512 e7dce5c4b4369c4d0a3dad192a139b4fb7a9c2b80e728080cc19e48d1b9a6227c166fc9bc78169357db756b8ee7cae275a3ca4c0edde2f70355b4615ac6175a7
- SSDEEP 196608:zmPSpC2GyXGEy+I7gXaA9/t29yMbA3urrGRFaWbrb5u/llx:zmPaXO+WehEF8+rGRZVellx
- TLSH T1CF763341B70B34A7D43D863C7346ED49D7A13FB982C417A82A4EF9586472B62E8BC11F
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1