General
- Target HxDSetup.exe
- Size 3.3MB
- Sample260722-wb42yaab67
- SHA256 dccfa4b16aa79e273cc7ffc35493c495a7fd09f92a4b790f2dc41c65f64d5378
- MD5 4f9e75a41d02666cd5cc86bd33a578fe
- SHA1 ac08b28e953d7d200bbb3c2e644890a689d0d8b1
- SHA512 0848bfd0494604e4b9173211cfdd27234e15d3728377a237472f404bced36535d486f824428f19c8a8fa35becadff604e5291352b80c9e06d357667b473381ca
- SSDEEP 98304:oYgmygQ4mUSSlmD5u6hY1T/zgzeJ0pV9u1O:Bgmw4iS+r20u0pVMo
- TLSH T1C7F5234BB2830975E162CA378669C814BC57377D6EF122136DF9E70F8BF49846832687
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
HxDSetup.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target HxDSetup.exe
- Size 3.3MB
- SHA256 dccfa4b16aa79e273cc7ffc35493c495a7fd09f92a4b790f2dc41c65f64d5378
- MD5 4f9e75a41d02666cd5cc86bd33a578fe
- SHA1 ac08b28e953d7d200bbb3c2e644890a689d0d8b1
- SHA512 0848bfd0494604e4b9173211cfdd27234e15d3728377a237472f404bced36535d486f824428f19c8a8fa35becadff604e5291352b80c9e06d357667b473381ca
- SSDEEP 98304:oYgmygQ4mUSSlmD5u6hY1T/zgzeJ0pV9u1O:Bgmw4iS+r20u0pVMo
- TLSH T1C7F5234BB2830975E162CA378669C814BC57377D6EF122136DF9E70F8BF49846832687
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.