General
- Target InputPortal-Windows-v1.0.1.exe
- Size 2.7MB
- Sample260722-hcydwsxsew
- SHA256 61c10fa7ddd45964a279dd7a642f0f33a2ce289f12a9902ba003c9b5c17d6e80
- MD5 a9f7681ba5da26b7afe511f15d0d32d2
- SHA1 b803c62a38123520877efd658b7c8256dca69110
- SHA512 8078a02c973be87f7281a6e3f77c1d2d49340c22e66dd75382a32b81efdb6c0ee6b0d3e01a364725595176962b5401b71e9c455ebf121335639cda91af7f5605
- SSDEEP 49152:SuI2hmtPrpWRsZWWBzfuOOOAYOOOOJxOFOcOlDH8K3/ZU1ZVXiqvtscByzqIsnon:S5OmtrpWRsZWWB1DH8KvZKst77
- TLSH T1E0D5AF6BD58BB5BEE0FD147066718630377B7A2994598D3A87E4885C87120B3383FE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
InputPortal-Windows-v1.0.1.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target InputPortal-Windows-v1.0.1.exe
- Size 2.7MB
- SHA256 61c10fa7ddd45964a279dd7a642f0f33a2ce289f12a9902ba003c9b5c17d6e80
- MD5 a9f7681ba5da26b7afe511f15d0d32d2
- SHA1 b803c62a38123520877efd658b7c8256dca69110
- SHA512 8078a02c973be87f7281a6e3f77c1d2d49340c22e66dd75382a32b81efdb6c0ee6b0d3e01a364725595176962b5401b71e9c455ebf121335639cda91af7f5605
- SSDEEP 49152:SuI2hmtPrpWRsZWWBzfuOOOAYOOOOJxOFOcOlDH8K3/ZU1ZVXiqvtscByzqIsnon:S5OmtrpWRsZWWB1DH8KvZKst77
- TLSH T1E0D5AF6BD58BB5BEE0FD147066718630377B7A2994598D3A87E4885C87120B3383FE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.