General
- Target setup-istripper.exe
- Size 109.8MB
- Sample260726-zzv1qa1yev
- SHA256 e931f9339c9d793e846cc2f77e5f1cde088a6a1ff42c5b12133cec2cc53ab2da
- MD5 27e2a6ffdd26620298e49a399546b810
- SHA1 9c1a8a6690575a6440c1f061f1cec5e0ba74a924
- SHA512 1f7e4bd9fd6347b1e55946f259767f492ecc5186fdda2dfd45ab8b0aa8f631cb2c10cbaf9d685e84342be01b1f284bbacd5c86ef6b5f077ad06dcc18dd349d3c
- SSDEEP 3145728:Kol2amvvHgUK/9gwsVFoVcES2ZKh/nxzOODd2X:KFKlPZVcjaKNxhwX
- TLSH T1D348330EB208D039C08D1A351BB69794853BEFE66E37AC8617E435DCDB393955E2BB01
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
setup-istripper.exe
Resource
win10v2004-20260513-en
27 signatures
300 seconds
Malware Config
Targets
-
- Target setup-istripper.exe
- Size 109.8MB
- SHA256 e931f9339c9d793e846cc2f77e5f1cde088a6a1ff42c5b12133cec2cc53ab2da
- MD5 27e2a6ffdd26620298e49a399546b810
- SHA1 9c1a8a6690575a6440c1f061f1cec5e0ba74a924
- SHA512 1f7e4bd9fd6347b1e55946f259767f492ecc5186fdda2dfd45ab8b0aa8f631cb2c10cbaf9d685e84342be01b1f284bbacd5c86ef6b5f077ad06dcc18dd349d3c
- SSDEEP 3145728:Kol2amvvHgUK/9gwsVFoVcES2ZKh/nxzOODd2X:KFKlPZVcjaKNxhwX
- TLSH T1D348330EB208D039C08D1A351BB69794853BEFE66E37AC8617E435DCDB393955E2BB01
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Drops startup file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1