General
- Target EmperorBrowser_Setup_1.0.0.exe
- Size 2.0MB
- Sample260724-blj5asyyaz
- SHA256 690ee71b7eb5d5161812a5aedc6afcb332aa23ddae12b96b2a830228cb11d1fc
- MD5 5932104ab3879a46c1ff41b23bdc0c17
- SHA1 4c1ba12e5b28f67a0e788dc317a45a827084412d
- SHA512 4685f4032ae10130469d5fa07fc023db8888b0a33233b8cab3400fb885d360045761a8f544deadee1d6cb804a15922c2230bb137591b2be5739642211d9e652b
- SSDEEP 24576:LXNrSLScusMmOvjjhzvLntGAjEAaRzrrxssKaj6sxomXrHSQR5XVsVsf7JIwFRGT:IuI2h9cv9Iaj6irHSQjTf72wFRs
- TLSH T1DD95D03FB28B753EE06E5A3A7A72E110583B7A6165124C5696F4C84CCF250B01E3FB97
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
EmperorBrowser_Setup_1.0.0.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target EmperorBrowser_Setup_1.0.0.exe
- Size 2.0MB
- SHA256 690ee71b7eb5d5161812a5aedc6afcb332aa23ddae12b96b2a830228cb11d1fc
- MD5 5932104ab3879a46c1ff41b23bdc0c17
- SHA1 4c1ba12e5b28f67a0e788dc317a45a827084412d
- SHA512 4685f4032ae10130469d5fa07fc023db8888b0a33233b8cab3400fb885d360045761a8f544deadee1d6cb804a15922c2230bb137591b2be5739642211d9e652b
- SSDEEP 24576:LXNrSLScusMmOvjjhzvLntGAjEAaRzrrxssKaj6sxomXrHSQR5XVsVsf7JIwFRGT:IuI2h9cv9Iaj6irHSQjTf72wFRs
- TLSH T1DD95D03FB28B753EE06E5A3A7A72E110583B7A6165124C5696F4C84CCF250B01E3FB97
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.