General
- Target ExpressPOS-Agent-Windows-x64-Setup.exe
- Size 4.0MB
- Sample260718-dlc24aes8l
- SHA256 76ba6c36fa6118a3023c1d57e1d1d51f69a3be1af54a847346e3b8f8a2de85ba
- MD5 5862fb5d2f5bd2f15df4234babb67af8
- SHA1 08ffa83ddfe17e8309260abf7056c0f9a16c6560
- SHA512 8e012d1689ef5a0b4deb30b68111f9aab9a0401e1847d81c2d4e39c5882f798b66ed3d212f636b3db7b65a125dab7b4692ae62a8c0e4325e4355ef24468c0c58
- SSDEEP 98304:95ODE5lBe2NQcvlqJVGSX3YelGeQMl10xgmPD9TqtA+97N3:PDAgQcvYJVGteQMsamr9V+97d
- TLSH T1FF16023BF18B653EE06A6B367A72A510583BBA7068164C4296ECF48CCF351701D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
ExpressPOS-Agent-Windows-x64-Setup.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ExpressPOS-Agent-Windows-x64-Setup.exe
- Size 4.0MB
- SHA256 76ba6c36fa6118a3023c1d57e1d1d51f69a3be1af54a847346e3b8f8a2de85ba
- MD5 5862fb5d2f5bd2f15df4234babb67af8
- SHA1 08ffa83ddfe17e8309260abf7056c0f9a16c6560
- SHA512 8e012d1689ef5a0b4deb30b68111f9aab9a0401e1847d81c2d4e39c5882f798b66ed3d212f636b3db7b65a125dab7b4692ae62a8c0e4325e4355ef24468c0c58
- SSDEEP 98304:95ODE5lBe2NQcvlqJVGSX3YelGeQMl10xgmPD9TqtA+97N3:PDAgQcvYJVGteQMsamr9V+97d
- TLSH T1FF16023BF18B653EE06A6B367A72A510583BBA7068164C4296ECF48CCF351701D3E797
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE