General
- Target Setup.exe
- Size 12.1MB
- Sample260716-vesmmsdt91
- SHA256 c6443b07d46f07e2f41bc0314c9ddf6616862e71894a3dbea182dc53f9b655a6
- MD5 5d61d0030c943e77ce398bc0d86fceb4
- SHA1 959130c711c34d2123b3af71122f0939d8ac527c
- SHA512 09ff92e2210b4543569ecdc0ed573359267ae24f6702f1270ffcc6d3bf0b4860cddd159dc041537c7f002e76da0239ddb50f07780359809652ee18f975914d9b
- SSDEEP 196608:SvARoYhAshkj6HmyxLC5pUQee4weqmAbhk:SvAqYhAsdHypUQX4wflk
- TLSH T194D6230CE2A916E8E27685348BD37E32E7B1705A535DB9CB1B58F6113B239D06B3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral3
Sample
Setup.exe
Resource
win11-20260513-en
4 signatures
300 seconds
Behavioral task
behavioral4
Sample
Setup.exe
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target Setup.exe
- Size 12.1MB
- SHA256 c6443b07d46f07e2f41bc0314c9ddf6616862e71894a3dbea182dc53f9b655a6
- MD5 5d61d0030c943e77ce398bc0d86fceb4
- SHA1 959130c711c34d2123b3af71122f0939d8ac527c
- SHA512 09ff92e2210b4543569ecdc0ed573359267ae24f6702f1270ffcc6d3bf0b4860cddd159dc041537c7f002e76da0239ddb50f07780359809652ee18f975914d9b
- SSDEEP 196608:SvARoYhAshkj6HmyxLC5pUQee4weqmAbhk:SvAqYhAsdHypUQX4wflk
- TLSH T194D6230CE2A916E8E27685348BD37E32E7B1705A535DB9CB1B58F6113B239D06B3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext