General
- Target HieuGLLiteAppsSetup.exe
- Size 31.2MB
- Sample260721-lwtftscv3j
- SHA256 28918d042715e253d98163b6fb95a49a5a2b0f3502adebd672cdfb4c8264b414
- MD5 05995d68b62ef6b900769e8cd4dcda16
- SHA1 661c14a60c9d7a94da3c3402c6755c72599bde8e
- SHA512 8c77806c8693e64aca1ced6384ea3a36cc6a80f856050875869300a95b0305ad56d82904c6492bbd18c0a2ac934cf740b8bda94e9246104c4ff4bb3bc733f4b7
- SSDEEP 786432:HCB+3uE1MVxMJwRdgLN6HyjmXTO0T+JFkoD7z2Lfp2dJD:HCBBe9Jwwp6HGmXTO0TaB72p6
- TLSH T1CF67337BF6CB543AE83A067179B29140163F767164568E839AF0C84CCF245B62D3F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
HieuGLLiteAppsSetup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
HieuGLLiteAppsSetup.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target HieuGLLiteAppsSetup.exe
- Size 31.2MB
- SHA256 28918d042715e253d98163b6fb95a49a5a2b0f3502adebd672cdfb4c8264b414
- MD5 05995d68b62ef6b900769e8cd4dcda16
- SHA1 661c14a60c9d7a94da3c3402c6755c72599bde8e
- SHA512 8c77806c8693e64aca1ced6384ea3a36cc6a80f856050875869300a95b0305ad56d82904c6492bbd18c0a2ac934cf740b8bda94e9246104c4ff4bb3bc733f4b7
- SSDEEP 786432:HCB+3uE1MVxMJwRdgLN6HyjmXTO0T+JFkoD7z2Lfp2dJD:HCBBe9Jwwp6HGmXTO0TaB72p6
- TLSH T1CF67337BF6CB543AE83A067179B29140163F767164568E839AF0C84CCF245B62D3F68B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.