General
- Target setup.exe
- Size 8.4MB
- Sample260724-le7bcsbm9z
- SHA256 ce772e59a827e64667474a4ae2a1400b8d2e6f1832b36dbd15fd1cf073bd5c91
- MD5 dcaead00e6f254a875a36e483309ad3c
- SHA1 1cf589ba8993db98bfaba49722e93b8c80849973
- SHA512 3655142bec779be6560614c719336275771d1028f99e2af06a9b35d47922db6b25c1f2ac9c72d054b1a08f283b18b356db6fbb8e2c0f183ca7638522510742e8
- SSDEEP 98304:3jYVGjE5ZTaRDeBYb26B8nfi65mhfDZW9bGr0Y3eYdxreLkMdF8KX7HBKnUF/hs6:3NjumDbZ6+Q9bGr0YTC4yR74C6C/
- TLSH T1B1963303E6975477F96018B7794AF0656C02B6B402D086BD2EFCCA4E0BFA78195B1EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 8.4MB
- SHA256 ce772e59a827e64667474a4ae2a1400b8d2e6f1832b36dbd15fd1cf073bd5c91
- MD5 dcaead00e6f254a875a36e483309ad3c
- SHA1 1cf589ba8993db98bfaba49722e93b8c80849973
- SHA512 3655142bec779be6560614c719336275771d1028f99e2af06a9b35d47922db6b25c1f2ac9c72d054b1a08f283b18b356db6fbb8e2c0f183ca7638522510742e8
- SSDEEP 98304:3jYVGjE5ZTaRDeBYb26B8nfi65mhfDZW9bGr0Y3eYdxreLkMdF8KX7HBKnUF/hs6:3NjumDbZ6+Q9bGr0YTC4yR74C6C/
- TLSH T1B1963303E6975477F96018B7794AF0656C02B6B402D086BD2EFCCA4E0BFA78195B1EF4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.