General
- Target hwmonitor.exe
- Size 2.9MB
- Sample260727-vtpvasap2s
- SHA256 24b91d93b6d58aa878532d5c7a592f454efdc65537568ad2d3f7719c11e55b34
- MD5 8ed91f48dc70aee60e34474425bb2bd9
- SHA1 c9bafdc8098ba20aec6f0379cd83719fd12d98d8
- SHA512 51bea5898e233e72ffbf4df31154d426e005a421305fc0682e0dd9b4dde4ee240f61362c5c2405598807233e57b9cb3e96c334212528d1cfeb1a9c8632bf536b
- SSDEEP 49152:8wRED3OmXXLtiQ7lHPTAB3qRu0Eut6y6qyCw6RcCLw872L6i/xTBAhUZMAmGGmv:8wREblTlsB3qRntFHRcB8A6pWZYG7
- TLSH T159E5F113F2CBE13EE05E1B3305B2A05894F77A616922AE5796ECB4ACCF351601D3E746
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
hwmonitor.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target hwmonitor.exe
- Size 2.9MB
- SHA256 24b91d93b6d58aa878532d5c7a592f454efdc65537568ad2d3f7719c11e55b34
- MD5 8ed91f48dc70aee60e34474425bb2bd9
- SHA1 c9bafdc8098ba20aec6f0379cd83719fd12d98d8
- SHA512 51bea5898e233e72ffbf4df31154d426e005a421305fc0682e0dd9b4dde4ee240f61362c5c2405598807233e57b9cb3e96c334212528d1cfeb1a9c8632bf536b
- SSDEEP 49152:8wRED3OmXXLtiQ7lHPTAB3qRu0Eut6y6qyCw6RcCLw872L6i/xTBAhUZMAmGGmv:8wREblTlsB3qRntFHRcB8A6pWZYG7
- TLSH T159E5F113F2CBE13EE05E1B3305B2A05894F77A616922AE5796ECB4ACCF351601D3E746
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.