General
- Target serum Setup.exe
- Size 168.3MB
- Sample260720-x18xvscy9j
- SHA256 b7270daca61c6be8da79a863806ddd9a0a7c226d4f14b9013d3d1dd2de6e616c
- MD5 7abd3f11e3dad83367690dafa3ae7291
- SHA1 7bbab4b67e67a9b750614b78ad8750d18c9576e3
- SHA512 f11af619b0b648beb98ee0004e9bdf1b312aa23299b859b958124d1716c0b7c4dad5653c86ba1bafb8c8b4984b13964ceac0be54832ece84b71061903c791e2a
- SSDEEP 3145728:jNv28aI0i0DXLV9N3SMST8xSUUrXTKUW78wndDwFtXCbv9ECR7ZGziv7b6Z:jxT2LN33RxXQXeUWbd+AvimdT+
- TLSH T12D883346EE4B2F34E502E2792805F3258ACE5DB817C5852B8DF8BD5F37675430A3A683
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
serum Setup.exe
Resource
win11-20260513-en
25 signatures
900 seconds
Malware Config
Targets
-
- Target serum Setup.exe
- Size 168.3MB
- SHA256 b7270daca61c6be8da79a863806ddd9a0a7c226d4f14b9013d3d1dd2de6e616c
- MD5 7abd3f11e3dad83367690dafa3ae7291
- SHA1 7bbab4b67e67a9b750614b78ad8750d18c9576e3
- SHA512 f11af619b0b648beb98ee0004e9bdf1b312aa23299b859b958124d1716c0b7c4dad5653c86ba1bafb8c8b4984b13964ceac0be54832ece84b71061903c791e2a
- SSDEEP 3145728:jNv28aI0i0DXLV9N3SMST8xSUUrXTKUW78wndDwFtXCbv9ECR7ZGziv7b6Z:jxT2LN33RxXQXeUWbd+AvimdT+
- TLSH T12D883346EE4B2F34E502E2792805F3258ACE5DB817C5852B8DF8BD5F37675430A3A683
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.