General
- Target MSPFame-Setup.exe
- Size 87.4MB
- Sample260724-bye14s1cnc
- SHA256 b45b23017a8cbbb3709879818fe188be130253010d789c04d9db19fe1e38d1c0
- MD5 7775d31e4d35fc00004807400b57ba6c
- SHA1 b0eddcdd8845597233aeeb30ada144393c5e5fa3
- SHA512 44f50ccfe637f9662b620235d6ea8b6e32eaac8144fbac21896f7db174f14c0458e946c9a0318c527d8202f9912220e82cfde414b11e5426ed3d246460592377
- SSDEEP 1572864:4pILyHbrbRVlQtY5h95ZlCQemKVO86gA28SaVrcuFApqAcXhgFBEktzPWPRv:rWHblB95QmKVF6R2+VlA9o0xAPF
- TLSH T16C18333BB19B403FE17D583E76F593A4903BEA22951288129BD4C44CCFA22B51D7FA47
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
MSPFame-Setup.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
MSPFame-Setup.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target MSPFame-Setup.exe
- Size 87.4MB
- SHA256 b45b23017a8cbbb3709879818fe188be130253010d789c04d9db19fe1e38d1c0
- MD5 7775d31e4d35fc00004807400b57ba6c
- SHA1 b0eddcdd8845597233aeeb30ada144393c5e5fa3
- SHA512 44f50ccfe637f9662b620235d6ea8b6e32eaac8144fbac21896f7db174f14c0458e946c9a0318c527d8202f9912220e82cfde414b11e5426ed3d246460592377
- SSDEEP 1572864:4pILyHbrbRVlQtY5h95ZlCQemKVO86gA28SaVrcuFApqAcXhgFBEktzPWPRv:rWHblB95QmKVF6R2+VlA9o0xAPF
- TLSH T16C18333BB19B403FE17D583E76F593A4903BEA22951288129BD4C44CCFA22B51D7FA47
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.