General
- Target setup.exe
- Size 3.9MB
- Sample260722-sf27csxdmd
- SHA256 852f9466b03a032b9f178a3b526fedf3707364b47d65652a002dc361d87f3267
- MD5 82382afe369de5fa74c83f4fd4e2cf72
- SHA1 97f139ca118c8925cc74789bc31bf0cb052c0618
- SHA512 7985a884b26c3269cfc05176a72943d08e94ee5478e971c76dd5a436f93e8dd8586a1dce976d3f6d7e561d746f66a672e91f4b868940fe916fda37295c75c117
- SSDEEP 49152:vr0cAfn7wh0QIaUrjJcIAVUbUVPH12JxQHh3PWPkzh8qQlAKAh01vdReg+R2v:af7wCQInrje/CAVMJy1WPkzkiKLVdBN
- TLSH T15D163301E3C3143AE45109745E1295B81D13F7AA29D5606B2FBCDB9F0BB92837DFA6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 3.9MB
- SHA256 852f9466b03a032b9f178a3b526fedf3707364b47d65652a002dc361d87f3267
- MD5 82382afe369de5fa74c83f4fd4e2cf72
- SHA1 97f139ca118c8925cc74789bc31bf0cb052c0618
- SHA512 7985a884b26c3269cfc05176a72943d08e94ee5478e971c76dd5a436f93e8dd8586a1dce976d3f6d7e561d746f66a672e91f4b868940fe916fda37295c75c117
- SSDEEP 49152:vr0cAfn7wh0QIaUrjJcIAVUbUVPH12JxQHh3PWPkzh8qQlAKAh01vdReg+R2v:af7wCQInrje/CAVMJy1WPkzkiKLVdBN
- TLSH T15D163301E3C3143AE45109745E1295B81D13F7AA29D5606B2FBCDB9F0BB92837DFA6B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.