General
- Target Petto.Setup.0.1.20.exe
- Size 78.4MB
- Sample260718-ydlpgset3w
- SHA256 6c70e4e8651117f6042d2fa5955ad4d81fbd556c531514cb8f10b5acf180cf58
- MD5 63d9f381c941f157682056093e3f60ba
- SHA1 f8f47b4519392d2f007b2b6ee075962098282a9c
- SHA512 24d88a5d6690a0bb27c74e013d243cc3cfe1f2699d689f9d565d5dcd3b11c32d9ff41b109b0c4721c39db60b409916fbc60dfbd18e018c726db579a0f7ea79b6
- SSDEEP 1572864:aa/kwbM7jFauGVZZAocPZEO9ZvWqGyqzwuBxAAf5pB7re:aHw4pqZn2EEMzwuDZf5zO
- TLSH T1480833697F8BC55AD93D9030649BD3B18F0B8EA7F540DCC78AC8DE9B70922421C5E399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Petto.Setup.0.1.20.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Petto.Setup.0.1.20.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target Petto.Setup.0.1.20.exe
- Size 78.4MB
- SHA256 6c70e4e8651117f6042d2fa5955ad4d81fbd556c531514cb8f10b5acf180cf58
- MD5 63d9f381c941f157682056093e3f60ba
- SHA1 f8f47b4519392d2f007b2b6ee075962098282a9c
- SHA512 24d88a5d6690a0bb27c74e013d243cc3cfe1f2699d689f9d565d5dcd3b11c32d9ff41b109b0c4721c39db60b409916fbc60dfbd18e018c726db579a0f7ea79b6
- SSDEEP 1572864:aa/kwbM7jFauGVZZAocPZEO9ZvWqGyqzwuBxAAf5pB7re:aHw4pqZn2EEMzwuDZf5zO
- TLSH T1480833697F8BC55AD93D9030649BD3B18F0B8EA7F540DCC78AC8DE9B70922421C5E399
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.