General
- Target setup.exe
- Size 5.9MB
- Sample260726-18dy8sstft
- SHA256 8a139e8d21756a4c7301d9dd35d06ad3b4d0fdc0cedd67d9feefc07036a96f65
- MD5 b935d672e3243f1bbed833abb5ea9fbe
- SHA1 9edd7c0ba8742c9f6fff854609163cef23bb8082
- SHA512 58ac5a09a3100b0cbf1b5c7492296f44c7f11f96c2631788e024160185ccf18f4ae4a99402a21a44dea7b2a22e02c26c3641f0ddd63d70f6184bd75ec9bca05e
- SSDEEP 98304:Hf7wCQInrje/CAVMJy1WGsF38rMPZxMu/PFiaFOlLtWclKk1uhVON:Hfn6/VSlGC38rU1B4lcwKk1uPk
- TLSH T15D563341F7C3193AE4110D355D92E6686E02B6FA59D415152EBCEBDF0BB82C3BAF6230
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
22 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 5.9MB
- SHA256 8a139e8d21756a4c7301d9dd35d06ad3b4d0fdc0cedd67d9feefc07036a96f65
- MD5 b935d672e3243f1bbed833abb5ea9fbe
- SHA1 9edd7c0ba8742c9f6fff854609163cef23bb8082
- SHA512 58ac5a09a3100b0cbf1b5c7492296f44c7f11f96c2631788e024160185ccf18f4ae4a99402a21a44dea7b2a22e02c26c3641f0ddd63d70f6184bd75ec9bca05e
- SSDEEP 98304:Hf7wCQInrje/CAVMJy1WGsF38rMPZxMu/PFiaFOlLtWclKk1uhVON:Hfn6/VSlGC38rU1B4lcwKk1uPk
- TLSH T15D563341F7C3193AE4110D355D92E6686E02B6FA59D415152EBCEBDF0BB82C3BAF6230
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Drops file in Drivers directory
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.